Skip to content

Add --strict flag for EVTX parsing to enforce strict error handling#129

Merged
wagga40 merged 1 commit intomasterfrom
fix-corrupted-evtx
Mar 28, 2026
Merged

Add --strict flag for EVTX parsing to enforce strict error handling#129
wagga40 merged 1 commit intomasterfrom
fix-corrupted-evtx

Conversation

@wagga40
Copy link
Copy Markdown
Owner

@wagga40 wagga40 commented Mar 28, 2026

Summary

  • Make EVTX parsing lenient by default: skip corrupted/malformed chunks and recover as many valid events as possible instead of aborting
  • Add --strict CLI flag to restore previous strict behavior (stop on EVTX parse errors)

Fix #128

@wagga40 wagga40 merged commit 656fe92 into master Mar 28, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add Lenient Parsing Mode to Handle Corrupted EVTX Files

1 participant