.evtx

Windows Event Log

Dedicated renderer

Format facts

MIME type: application/x-evtx
Apple UTI: custom
Stock Quick Look: no stock preview
Planned approach (census): special-renderer
Icon hint: generic-icon
Prevalence: common

Renderer note (from the census)

parse ELF-like chunks for event records

Gotchas: Windows forensics