windows-eventlog-native 0.2.2

Native Windows Event Log querying and structured XML parsing for DFIR, detection engineering, and security research.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15

# windows-eventlog-native

> Native Rust querying and structured parsing for modern Windows Event Log
> channels, designed for DFIR, detection engineering, and security research.

- [README](https://github.com/icedracon/windows-eventlog-native/blob/main/README.md)
- [API documentation](https://docs.rs/windows-eventlog-native)
- [Ecosystem map](https://github.com/icedracon/win32-min/blob/master/ECOSYSTEM.md)
- [ABI foundation](https://github.com/icedracon/win32-min)
- [Security Event Log workflow](https://github.com/icedracon/windows-eventlog-native/blob/main/examples/recent_security_events.rs)
- [Research workflow index](https://github.com/icedracon/win32-min/blob/master/RESEARCH-WORKFLOWS.md)

The implemented path is local `EvtQuery` to `EvtNext` to `EvtRender` with XML
and EventData parsing. Subscription, bookmarks, remote sessions, publisher
message formatting, and channel enumeration are not implemented yet.