MCPcopy Index your code
hub / github.com/Velocidex/evtx

github.com/Velocidex/evtx @v0.2.0

Chat with this repo
repository ↗ · DeepWiki ↗ · release v0.2.0 ↗ · + Follow
106 symbols 288 edges 16 files 9 documented · 8%
What it actually does AI analysis from the code graph — generated when you open this
loading…
README

A Golang EVTX Parser

This parser is based on code by https://github.com/KasperskyLab/ForensicsTools

Extension points exported contracts — how you extend this code

MessageResolver (Interface)
(no doc) [3 implementers]
messages.go
CommandHandler (FuncType)
(no doc)
cmd/dumpevtx.go

Core symbols most depended-on inside this repo

debug
called by 28
debug.go
Close
called by 18
messages.go
Offset
called by 17
evtx.go
ConsumeUint32
called by 10
evtx.go
ConsumeUint8
called by 9
evtx.go
ConsumeBytes
called by 9
evtx.go
SkipBytes
called by 9
evtx.go
CurrentTemplate
called by 8
evtx.go

Shape

Function 50
Method 38
Struct 16
FuncType 1
Interface 1

Languages

Go100%

Modules by API surface

evtx.go51 symbols
messages_windows.go12 symbols
messages.go11 symbols
messages_database.go5 symbols
cmd/parse.go5 symbols
parser_test.go4 symbols
cmd/extract_windows.go4 symbols
cmd/lookup.go3 symbols
cmd/watch.go2 symbols
cmd/dumpevtx.go2 symbols
cmd/chunks.go2 symbols
utils.go1 symbols

For agents

$ claude mcp add evtx \
  -- python -m otcore.mcp_server <graph>

⬇ download graph artifact