From 0b49fc77333cd4f69dc0e25a3b41caab2f08c892 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Fri, 7 Oct 2022 20:29:26 +0200
Subject: [PATCH] python310Packages.dissect-eventlog: init at 3.1

---
 .../dissect-eventlog/default.nix              | 52 +++++++++++++++++++
 pkgs/top-level/python-packages.nix            |  2 +
 2 files changed, 54 insertions(+)
 create mode 100644 pkgs/development/python-modules/dissect-eventlog/default.nix

diff --git a/pkgs/development/python-modules/dissect-eventlog/default.nix b/pkgs/development/python-modules/dissect-eventlog/default.nix
new file mode 100644
index 000000000000..d5b8b87a2271
--- /dev/null
+++ b/pkgs/development/python-modules/dissect-eventlog/default.nix
@@ -0,0 +1,52 @@
+{ lib
+, buildPythonPackage
+, dissect-cstruct
+, dissect-util
+, fetchFromGitHub
+, setuptools
+, setuptools-scm
+, pytestCheckHook
+, pythonOlder
+}:
+
+buildPythonPackage rec {
+  pname = "dissect-eventlog";
+  version = "3.1";
+  format = "pyproject";
+
+  disabled = pythonOlder "3.7";
+
+  src = fetchFromGitHub {
+    owner = "fox-it";
+    repo = "dissect.eventlog";
+    rev = version;
+    hash = "sha256-cLIsK2/pL9nNOitoTZprqAio1BOo3/Uqfbl8uL/1tG4=";
+  };
+
+  SETUPTOOLS_SCM_PRETEND_VERSION = version;
+
+  nativeBuildInputs = [
+    setuptools
+    setuptools-scm
+  ];
+
+  propagatedBuildInputs = [
+    dissect-cstruct
+    dissect-util
+  ];
+
+  checkInputs = [
+    pytestCheckHook
+  ];
+
+  pythonImportsCheck = [
+    "dissect.eventlog"
+  ];
+
+  meta = with lib; {
+    description = "Dissect module implementing parsers for the Windows EVT, EVTX and WEVT log file formats";
+    homepage = "https://github.com/fox-it/dissect.eventlog";
+    license = licenses.agpl3Only;
+    maintainers = with maintainers; [ fab ];
+  };
+}
diff --git a/pkgs/top-level/python-packages.nix b/pkgs/top-level/python-packages.nix
index 2c98dbd3dcd9..76ade98801a3 100644
--- a/pkgs/top-level/python-packages.nix
+++ b/pkgs/top-level/python-packages.nix
@@ -2485,6 +2485,8 @@ in {
 
   dissect-etl = callPackage ../development/python-modules/dissect-etl { };
 
+  dissect-eventlog = callPackage ../development/python-modules/dissect-eventlog { };
+
   dissect-evidence = callPackage ../development/python-modules/dissect-evidence { };
 
   dissect-util = callPackage ../development/python-modules/dissect-util { };