[event_log] add verbose option to wevtutil.py

This commit is contained in:
1orenz0
2019-10-09 14:49:43 +01:00
committed by hakril
parent 91ef7da2e1
commit 215afaa418
+9 -2
View File
@@ -387,17 +387,17 @@ def format_event_metadata(publisher_metadata, event_metadata, args):
)
def enum_publishers(args):
""" enum-publishers verb implementation """
manager = event_log.EvtlogManager()
for publisher in sorted(list(manager.publishers), key=lambda pub:pub.name.lower()):
print(publisher.name)
def get_publisher(args):
""" get-publisher verb implementation """
manager = event_log.EvtlogManager()
publisher = manager.open_publisher(args.publisher_name)
channels_info = "\n".join(map(lambda c: format_channel_metadata(publisher.metadata, c, args), publisher.metadata.channels_metadata))
levels_info = "\n".join(map(lambda l: format_level_metadata(publisher.metadata, l, args), publisher.metadata.levels_metadata))
opcodes_info = "\n".join(map(lambda o: format_opcode_metadata(publisher.metadata, o, args), publisher.metadata.opcodes_metadata))
@@ -493,6 +493,7 @@ if __name__ == '__main__':
import argparse
parser = argparse.ArgumentParser("wevtutil script reimplementation using PythonForWindows")
parser.add_argument("-v", "--verbose", action="store_true", help="active verbose logging")
action_parsers = parser.add_subparsers(dest="action", help="subparsers for action specific arguments")
# we can't express shorthands easily like ep for enum-publishers since only Python3's argparse surpport parser "aliases"
@@ -516,6 +517,12 @@ if __name__ == '__main__':
args = parser.parse_args()
if args.verbose:
logging.basicConfig(level=logging.DEBUG)
else:
logging.basicConfig(level=logging.INFO)
main(args)