From 77053d1283aa7ed32df2ed6e0e1711cf7d1edd5b Mon Sep 17 00:00:00 2001 From: doracpphp Date: Sat, 21 Jun 2025 13:24:43 +0900 Subject: [PATCH] add chunk header LastEventRecOffset --- evtx.go | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/evtx.go b/evtx.go index ca2c216..4fd9a98 100644 --- a/evtx.go +++ b/evtx.go @@ -113,6 +113,11 @@ type ChunkHeader struct { FirstEventRecID uint64 LastEventRecID uint64 HeaderSize uint32 + LastEventRecOffset uint32 + _ [4]byte + EventRecordCheckSum uint32 + _ [68]byte + CheckSum uint32 } type Chunk struct {