Struct evtx::EvtxRecord

pub struct EvtxRecord<'a> {
    pub event_record_id: u64,
    pub timestamp: DateTime<Utc>,
    pub tokens: Vec<BinXMLDeserializedTokens<'a>>,
    pub settings: &'a ParserSettings,
}

Fields

event_record_id: u64

timestamp: DateTime<Utc>

tokens: Vec<BinXMLDeserializedTokens<'a>>

settings: &'a ParserSettings

Methods

impl<'a> EvtxRecord<'a>

pub fn into_serialized<T: BinXmlOutput<Vec<u8>>>(
    self
) -> Result<SerializedEvtxRecord>

Consumes the record, returning a SerializedEvtxRecord with the serialized data.

pub fn into_json(self) -> Result<SerializedEvtxRecord>

Consumes the record and parse it, producing a JSON serialized record.

pub fn into_xml(self) -> Result<SerializedEvtxRecord>

Consumes the record and parse it, producing an XML serialized record.

Trait Implementations

impl<'a> PartialEq<EvtxRecord<'a>> for EvtxRecord<'a>

fn eq(&self, other: &EvtxRecord<'a>) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &EvtxRecord<'a>) -> bool

This method tests for !=.

impl<'a> Clone for EvtxRecord<'a>

fn clone(&self) -> EvtxRecord<'a>

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<'a> Debug for EvtxRecord<'a>

fn fmt(&self, f: &mut Formatter) -> Result

Formats the value using the given formatter.