TODO:
* evtexport, add date time format selection
* evtexport, add flags to strip strings and messages string of CR-LFs
* evtexport, add support for CVS and/or TSV format with surrounding quotes

* add parameter expansion support
* recovery: what about record that is recoverable but has a size mismatch
* msvscpp:
  - check and fix debug output generation
  - check 64-bit compilation output (warnings)
* check signal abort
* test find paths on windows
* get %WinDir%
  SYSTEM\CurrentControlSet\Control\Session Manager\Environment\windir
  - add callback for dealing with path expansion ?
* registry file:
  - detect the file type + version based on the base sub keys?
  - add file type specific support e.g. CurrentControlSet in key names ?
    or be more generic and allow HKEY_ ... type of keys and detect
    registry file type

* libcdirectory:
  - move WINAPI * path expansion from export handle to libcdirectory
* update manuals
  - evtexport add example output
* add error tollerability (+/-)
  - sizes and copy

Tools:
* API
  - functionality to parse event identifier ?
* registy file
  - what about NT4 root/base key support ?
* evtexport/export handle
  - validate eventlog/computername in system registry ?
  - use current control set nr ?
  - print if message file key not found
  - print if message file not found
  - print if message file has no resources
  - user sid - find corresponding user name ?
  - output data as CSV/TSV, DFXML ? (different output formatting modules)
  - print data
  - move output to separate code, e.g. libpff
* evtinfo
* pyevt
  - functionality to parse event identifier ?
  - string representations of event type ?
  - access to data
* tests
  - file wrap

Format:
* event flags ? (debug function)
* closing record number ?

Notes
* %SystemRoot% expansion support for WINNT and WINNT35
  check if this is set in SOFTWARE\Microsoft\Windows NT\CurrentVersion\ ?

20160107
* worked on Python 3 support

20160107
* 2016 update

20151221
* applied updates

20151206
* updated libfwnt

20151205
* worked on Python bindings

20150726
* worked on tests

20150725
* worked on setup.py

20150707
* worked on check signature

20150706
* bug fixes

20150702
* bug fixes

20150105
* 2015 update

20141229
* updated dependencies
* updated version for release

20141228
* updated dpkg files

20141222
* worked on Python 3 support

20141220
* worked on Python 3 support

20141218
* worked on tests

20141217
* worked on Python 3 support

20141129
* code clean up

20141117
* code clean up

20141026
* changes for deployment

20141019
* changes for deployment

20141009
* updated dependencies and corresponding changes

20141004
* update Python-bindings tests

20140928
* removed README.macosx
* changes for project site move

20140831
* bug fix in Python-bindings

20140731
* bug fix in Python-bindings

20140723
* worked on dpkg debug packages support

20140531
* updated msvscpp files

20140530
* updated dependencies
* worked on Python-bindings
* replaced PackageMaker for pkgbuild

20140411
* bug fix for strings offset correction if member data > 0

20140402
* code clean up

20140323
* worked on Python-bindings

20140317
* updated dependencies
* worked on setup.py
* worked on Python-bindings

20140131
* removed examples

20140112
* updated dependencies

20140105
* bug fix in check signature
* 2014 update
* updated dependencies

20132111
* small fix in evtexport -h output
* updated dependencies
* worked on Python bindings

20131013
* updated dependencies

20130928
* worked on setup.py, largely for MSI builds

20130923
* updated dependencies

20130909
* updated dependencies
* worked on libcthreads build support

20130727
* updated dependencies

20130726
* pyevt
  - changed event identifier to an unsigned long
  - fixes for >2G file objects in BFIO glue code

20130609
* updated dependencies

20130421
* worked on tests
* updated dependencies

20130416
* code clean up

20130415
* bug fix for wrapped event record

20130414
* updated dependencies
* fixed codepage 1255 restriction
* worked on tests
* updates and bug fixes in pyevt
* implemented libfdata support to improve handling of large EVT files
* remove item flags
* added support for truncated event record corruption scenario

20120409
* fixed codepage 949 and 950 restriction

20120319
* updated dependencies
* changes for libfdata update

20130303
* added PackageMaker files

20130226
* fixed some typos in comment

20130210
* updated libcfile to allow reading from open files

20130209
* small fix in the libcdirectory msvscpp files
* updated dependencies

20130113
* updated msvscpp files
* updated examples

20130110
* worked on pyevt

20130109
* worked on pyevt

20130108
* worked on pyevt
* pyevt changed access flags into Python-like mode

20130107
* worked on pyevt
* 2013 update
* updated dependencies
* added get offset functionality

20121220
* evtexport: bug fix in message string formatting

20121214
* evtexport: added decimal event number

20121129
* evtexport: remove cariage returns from message string

20121125
* evtexport: remove multiple successive new lines from message string
* fixes and improvement to record recovery

20121122
* pyevt: code clean up

20121103
* pyevt: bug fixes
* updated dependencies

20121022
* small changes

20121021
* small changes

20121018
* worked on pyevt
* updated libcerror, libcpath
* updated message handle, message file, export handle

20121017
* code clean up
* update message handle
* added support for multiple message filenames separated by ;

20121016
* changed default language
* changes to pyevt

20121013
* worked on message handle

20121012
* worked on export handle

20121007
* textual fixes
* worked on pyevt

20120925
* bug fix export handle in error handling

20120924
* update dependencies

20120910
* code clean up
* update dependencies
* worked on -r caseless filename support
* update msvscpp files

20120909
* worked on -r caseless filename support

20120907
* worked on determining %SystemRoot% from SOFTWARE registry

20120906
* worked on evtexport
* worked on registry file
* worked on determining %SystemRoot% from SOFTWARE registry

20120905
* updated dependencies
* evtexport moved -f to -t and an implementation
* worked on registry file

20120904
* added debug output
* fix for too strict size checks
* fix in configure for missing libfwevt

20120819
* updated dependencies
* worked on printing category name
* worked on API - access to data

20120815
* worked on python bindings
* Added user SID as string support to API
* worked on tools

20120814
* worked on python bindings
* worked on tools

20120805
* updated dependencies
* added libcsplit support

20120625
* moved language support to libclocale

20120624
* updated dependencies
* fixed TODO in export handle fixes issue
* reversed library order in evttools Makefile for MinGW
* worked on msvscpp files
* worked on man pages
* fixes for WINAPI support in libcdirectory

20120517
* updated dependencies
* export_handle_get_message_file_path now returns 0
  if no corresponding file has been found

20120430
* small change to recovered record scan

20120424
* updated dependencies

20120423
* worked on msvscpp files

20120422
* fixes for deployment

20120413
* export_handle: code clean up

20120412
* worked on export mode
* added export of recovered items
* change -m into -p

20120411
* added detection if wrapped flag is not set but file is wrapped
* worked on improving recovery
* added functionality to scan for records

20120410
* worked on Python bindings

20120409
* libregf now is case insensitive regarding key/value names

20120408
* updated dependencies

20120321
* fix for libexe Makefile

20120318
* worked on libsystem directory entry support

20120304
* worked on multi language support

20120302
* fixed multiple memory leaks
* added support for multi message file registy values

20120227
* worked on case insensitive path handling

20120226
* worked on formatted strings
* worked on case insensitive path handling

20120225
* 2012 update

20111124
* worked on cache handle
* added libfcache
* updated libfdata, libexe, libwrc

20111120
* updated log handle
* update libfdata, libfvalue, libfwnt, libregf

20111116
* updated libwrc

20111114
* worked on dirty file support

20111113
* code clean up
* updated array type
* updated libctring, libsystem, libfvalue
* added libexe, libregf, libwrc

20111110
* code clean up

20111101
* updated libcstring, libsystem, libuna, libbfio, libfdatetime, libfvalue
* added windows codepage 932 and 936 support
* added event id debug function
* added debug function for file flags

20111024
* removed mapi include header

20111018
* small changes

20111015
* small changes in README files

20111014
* small changes to export and info handle

20111013
* worked on initial version
* fix for building static executables on Cygwin
* updated libfvalue, libfdatetime

20111009
* worked on initial version

20111005
* worked on initial version
* updated configure and m4 scripts
* updated README files
* updated pc file
* updated spec file

20111004
* worked on initial version

20111003
* Created initial version based on libnk2

