Install this version:
emerge -a =app-admin/evtxtools-1.1.1
# Copyright 1999-2021 Gentoo Authors
# Distributed under the terms of the GNU General Public License v2
EAPI=8
inherit perl-module
MY_PN="Parse-Evtx"
DESCRIPTION="Read, decode and dump Windows Vista/2008/7 event log file"
HOMEPAGE="http://computer.forensikblog.de/en/topics/windows/vista_event_log"
SRC_URI="http://computer.forensikblog.de/files/evtx/${MY_PN}-${PV}.zip"
LICENSE="GPL-2"
SLOT="0"
KEYWORDS="amd64 x86"
RDEPEND="
dev-perl/Digest-CRC
dev-perl/DateTime
dev-perl/Carp-Assert
dev-perl/Data-Hexify
"
BDEPEND="${RDEPEND}
app-arch/unzip
virtual/perl-ExtUtils-MakeMaker
"
S="${WORKDIR}/${MY_PN}-${PV}"
pkg_postinst() {
einfo "Consider the following as how-to:"
einfo "http://rwmj.wordpress.com/2011/04/17/decoding-the-windows-event-log-using-guestfish/"
}
dev-perl/Digest-CRC dev-perl/DateTime dev-perl/Carp-Assert dev-perl/Data-Hexify
dev-perl/Digest-CRC dev-perl/DateTime dev-perl/Carp-Assert dev-perl/Data-Hexify app-arch/unzip virtual/perl-ExtUtils-MakeMaker
| Type | File | Size | Source URLs |
|---|---|---|---|
| DIST | Parse-Evtx-1.1.1.zip | 71351 bytes | http://computer.forensikblog.de/files/evtx/Parse-Evtx-1.1.1.zip |