///|
fn main {
let file = @evtx.parse_evtx(
@evtx.write_events(@evtx.sample_event_drafts()).unwrap(),
).unwrap()
let spec = @evtx.FilterSpec::{
event_id: Some(4624U),
provider: None,
channel: Some("Security"),
computer: None,
level: None,
contains: None,
since: None,
until: None,
}
let hit = file.filter(spec, @evtx.PythonEvtx).unwrap()
println("matched=\{hit.length()}")
println(hit[0].json())
}