Definition in following file: https://github.com/Velocidex/evtx/blob/1fdf8be7325e21cc7b9d83b2bae198a98267f4c1/evtx.go#L67 miss one field: `ChunkCount uint16` after: `HeaderBlockSize uint16` it also makes `FileFlags `and `CheckSum `unusable. Sample sources of Evtx Headers: https://github.com/cgsecurity/testdisk/blob/261c73bb72273e2a16fb06eebfea2c1892a341f3/src/file_evtx.c#L45 https://github.com/williballenthin/python-evtx/blob/cadd06bce3876ed9907deacb0bb3e65b191eef49/Evtx/Evtx.py#L145 
Definition in following file:
evtx/evtx.go
Line 67 in 1fdf8be
miss one field:
ChunkCount uint16after:
HeaderBlockSize uint16it also makes
FileFlagsandCheckSumunusable.Sample sources of Evtx Headers:
https://github.com/cgsecurity/testdisk/blob/261c73bb72273e2a16fb06eebfea2c1892a341f3/src/file_evtx.c#L45
https://github.com/williballenthin/python-evtx/blob/cadd06bce3876ed9907deacb0bb3e65b191eef49/Evtx/Evtx.py#L145