🍺 BREW Explorer

← all formulae

evtx

brew install evtx v0.12.2 Apache-2.0 OR MIT

Windows XML Event Log parser

128
30-day installs · #3148
268
90-day · #3721
926
365-day · #3965
927
★ GitHub stars · updated 2mo ago

Build dependencies

Links

Raw metadata
{
  "aliases": [],
  "alternatives": [],
  "build_dependencies": [
    "rust"
  ],
  "categories": [],
  "caveats": null,
  "conflicts_with": [],
  "dependencies": [],
  "deprecated": 0,
  "deprecation_reason": null,
  "desc": "Windows XML Event Log parser",
  "disable_reason": null,
  "disabled": 0,
  "enrichment_fetched_at": "2026-06-20T23:37:26+00:00",
  "first_seen": "2026-06-20T23:34:18+00:00",
  "full_name": "evtx",
  "github_default_branch": "master",
  "github_last_commit_at": "2026-06-13T16:09:17Z",
  "github_readme_excerpt": "\u003ch1 align=\"center\"\u003e\u003cimg style=\"padding:0;vertical-align:bottom;\" height=\"32\" width=\"32\" src=\"/eventvwr.ico\"/\u003e EVTX\u003c/h1\u003e\n\u003cdiv align=\"center\"\u003e\n \u003cp\u003e\n  \u003cstrong\u003e\n   A cross-platform parser for the Windows XML EventLog format\n  \u003c/strong\u003e\n\n \u003c/p\u003e\n\u003c/div\u003e\n\n\u003cbr /\u003e\n\n\u003cdiv align=\"center\"\u003e\n  \u003c!-- Crates version --\u003e\n  \u003ca href=\"https://crates.io/crates/evtx\"\u003e\n    \u003cimg src=\"https://img.shields.io/crates/v/evtx.svg?style=flat-square\"\n    alt=\"Crates.io version\" /\u003e\n  \u003c/a\u003e\n  \u003c!-- Downloads --\u003e\n  \u003ca href=\"https://crates.io/crates/evtx\"\u003e\n    \u003cimg src=\"https://img.shields.io/crates/d/evtx.svg?style=flat-square\"\n      alt=\"Download\" /\u003e\n  \u003c/a\u003e\n  \u003c!-- docs.rs docs --\u003e\n  \u003ca href=\"https://docs.rs/evtx\"\u003e\n    \u003cimg src=\"https://img.shields.io/badge/docs-latest-blue.svg?style=flat-square\"\n      alt=\"docs.rs docs\" /\u003e\n  \u003c/a\u003e\n   \u003ca href=\"https://github.com/rust-secure-code/safety-dance/\"\u003e\n    \u003cimg src=\"https://img.shields.io/badge/unsafe-forbidden-success.svg\"\n      alt=\"safety-dance\" /\u003e\n  \u003c/a\u003e\n  \u003ca href=\"https://github.com/omerbenamram/evtx/actions/workflows/test.yml\"\u003e\n    \u003cimg src=\"https://github.com/omerbenamram/evtx/actions/workflows/test.yml/badge.svg\"\n      alt=\"Build status\" /\u003e\n  \u003c/a\u003e\n\u003c/div\u003e\n\n\u003c/br\u003e\n\n## Features\n\n - \ud83d\udd12 Implemented using 100% safe rust - and works on all platforms supported by rust (that have stdlib).\n - \u26a1 Fast - see benchmarks below. It\u0027s faster than any other implementation by order(s) of magnitude!\n - \ud83d\ude80 Multi-threaded.\n - \u2728 Supports XML and JSON outputs, both being directly constructed from a shared intermediate representation (IR) (no xml2json conversion is performed!)\n - \u26cf\ufe0f Supports some basic recovery of missing records/chunks!\n - \ud83d\udc0d Python bindings are available as well at https://github.com/omerbenamram/pyevtx-rs (and at PyPi https://pypi.org/project/evtx/)\n\n## Web-based Viewer (EVTX Web)\n\n![EVTX Web Screenshot](/evtx_web_ui.png)\n\nPrefer a zero-install option?  A fully-featured EVTX explorer runs right in your browser, powered by the same Rust core compiled to WebAssembly.\n",
  "github_repo": "omerbenamram/evtx",
  "github_stars": 927,
  "github_topics": [],
  "homepage": "https://github.com/omerbenamram/evtx",
  "homepage_og_description": null,
  "homepage_og_image": null,
  "homepage_title": null,
  "installs_30d": 128,
  "installs_365d": 926,
  "installs_90d": 268,
  "keg_only": 0,
  "keg_only_reason": null,
  "last_seen": "2026-06-20T23:34:18+00:00",
  "license": "Apache-2.0 OR MIT",
  "llm_generated_at": null,
  "llm_model": null,
  "name": "evtx",
  "oldnames": [],
  "one_liner": null,
  "optional_dependencies": [],
  "rank_30d": 3148,
  "rank_365d": 3965,
  "rank_90d": 3721,
  "raw_hash": "257802c137cbaef7",
  "recommended_dependencies": [],
  "revision": 0,
  "ruby_source_path": "Formula/e/evtx.rb",
  "tap": "homebrew/core",
  "test_dependencies": [],
  "uses_from_macos": [],
  "version_head": "HEAD",
  "version_stable": "0.12.2",
  "versioned_formulae": [],
  "why_use_this": null
}