python-evtx icon indicating copy to clipboard operation
python-evtx copied to clipboard

pip3 install doesn't install scripts subdirectory/submodule

Open awisse opened this issue 9 months ago • 2 comments

Running, for instance

evtx_info Windows_Logs.evtx

gives:

Traceback (most recent call last):
  File "/home/user/Projects/Event-Viewing/py-evtx/bin/evtx_info", line 5, in <module>
    from scripts.evtx_info import main
ModuleNotFoundError: No module named 'scripts'

Looking at the contents of the wheel (python_evtx-0.8.1-py3-none-any.whl) from pypi.org:

Archive:  python_evtx-0.8.1-py3-none-any.whl.zip
  Length      Date    Time    Name
---------  ---------- -----   ----
    19308  2025-05-02 08:24   Evtx/BinaryParser.py
    17234  2025-05-02 08:24   Evtx/Evtx.py
    47341  2025-05-02 08:24   Evtx/Nodes.py
     9943  2025-05-02 08:24   Evtx/Views.py
      812  2025-05-02 08:24   Evtx/__init__.py
    11358  2025-05-02 08:24   python_evtx-0.8.1.dist-info/licenses/LICENSE.TXT
     5980  2025-05-02 08:24   python_evtx-0.8.1.dist-info/METADATA
       91  2025-05-02 08:24   python_evtx-0.8.1.dist-info/WHEEL
      514  2025-05-02 08:24   python_evtx-0.8.1.dist-info/entry_points.txt
        5  2025-05-02 08:24   python_evtx-0.8.1.dist-info/top_level.txt
      880  2025-05-02 08:24   python_evtx-0.8.1.dist-info/RECORD
---------                     -------
   113466                     11 files

awisse avatar May 05 '25 17:05 awisse

thanks for calling this out @awisse this is a regression in how the project is packaged. until i can fix this, id suggest downgrade the version you pull from pypi.

williballenthin avatar May 05 '25 18:05 williballenthin

Meanwhile, another workaround is to pull the scripts directory from github and drop it into the site-packages folder.

awisse avatar May 05 '25 20:05 awisse