TODO:
* recovery: what about record that is recoverable but has a size mismatch
* msvscpp:
  - check and fix debug output generation
  - check 64-bit compilation output (warnings)
* check signal abort
* test find paths on windows
* get %WinDir%
  SYSTEM\CurrentControlSet\Control\Session Manager\Environment\windir
  - add callback for dealing with path expansion ?
* registry file:
  - detect the file type + version based on the base sub keys?
  - add file type specific support e.g. CurrentControlSet in key names ?
    or be more generic and allow HKEY_ ... type of keys and detect
    registry file type

* libcdirectory:
  - move WINAPI * path expansion from export handle to libcdirectory
* update manuals
  - evtexport add example output
* add error tollerability (+/-)
  - sizes and copy

Tools:
* API
  - functionality to parse event identifier ?
* registy file
  - what about NT4 root/base key support ?
* evtexport/export handle
  - validate eventlog/computername in system registry ?
  - use current control set nr ?
  - print if message file key not found
  - print if message file not found
  - print if message file has no resources
  - user sid - find corresponding user name ?
  - output data as CSV/TSV, DFXML ? (different output formatting modules)
  - print data
  - move output to separate code, e.g. libpff
* evtinfo
* pyevt
  - functionality to parse event identifier ?
  - string representations of event type ?
  - access to data
* tests
  - file wrap

Format:
* event flags ? (debug function)
* closing record number ?

Notes
* %SystemRoot% expansion support for WINNT and WINNT35
  check if this is set in SOFTWARE\Microsoft\Windows NT\CurrentVersion\ ?

20130727
* updated dependencies

20130726
* pyevt
  - changed event identifier to an unsigned long
  - fixes fro >2G file objects in BFIO glue code

20130609
* updated dependencies

20130421
* worked on tests
* updated dependencies

20130416
* code clean up

20130415
* bug fix for wrapped event record

20130414
* updated dependencies
* fixed codepage 1255 restriction
* worked on tests
* updates and bug fixes in pyevt
* implemented libfdata support to improve handling of large EVT files
* remove item flags
* added support for truncated event record corruption scenario

20120409
* fixed codepage 949 and 950 restriction

20120319
* updated dependencies
* changes for libfdata update

20130303
* added PackageMaker files

20130226
* fixed some typos in comment

20130210
* updated libcfile to allow reading from open files

20130209
* small fix in the libcdirectory msvscpp files
* updated dependencies

20130113
* updated msvscpp files
* updated examples

20130110
* worked on pyevt

20130109
* worked on pyevt

20130108
* worked on pyevt
* pyevt changed access flags into Python-like mode

20130107
* worked on pyevt
* 2013 update
* updated dependencies
* added get offset functionality

20121220
* evtexport: bug fix in message string formatting

20121214
* evtexport: added decimal event number

20121129
* evtexport: remove cariage returns from message string

20121125
* evtexport: remove multiple successive new lines from message string
* fixes and improvement to record recovery

20121122
* pyevt: code clean up

20121103
* pyevt: bug fixes
* updated dependencies

20121022
* small changes

20121021
* small changes

20121018
* worked on pyevt
* updated libcerror, libcpath
* updated message handle, message file, export handle

20121017
* code clean up
* update message handle
* added support for multiple message filenames separated by ;

20121016
* changed default language
* changes to pyevt

20121013
* worked on message handle

20121012
* worked on export handle

20121007
* textual fixes
* worked on pyevt

20120925
* bug fix export handle in error handling

20120924
* update dependencies

20120910
* code clean up
* update dependencies
* worked on -r caseless filename support
* update msvscpp files

20120909
* worked on -r caseless filename support

20120907
* worked on determining %SystemRoot% from SOFTWARE registry

20120906
* worked on evtexport
* worked on registry file
* worked on determining %SystemRoot% from SOFTWARE registry

20120905
* updated dependencies
* evtexport moved -f to -t and an implementation
* worked on registry file

20120904
* added debug output
* fix for too strict size checks
* fix in configure for missing libfwevt

20120819
* updated dependencies
* worked on printing category name
* worked on API - access to data

20120815
* worked on python bindings
* Added user SID as string support to API
* worked on tools

20120814
* worked on python bindings
* worked on tools

20120805
* updated dependencies
* added libcsplit support

20120625
* moved language support to libclocale

20120624
* updated dependencies
* fixed TODO in export handle fixes issue
* reversed library order in evttools Makefile for MinGW
* worked on msvscpp files
* worked on man pages
* fixes for WINAPI support in libcdirectory

20120517
* updated dependencies
* export_handle_get_message_file_path now returns 0
  if no corresponding file has been found

20120430
* small change to recovered record scan

20120424
* updated dependencies

20120423
* worked on msvscpp files

20120422
* fixes for deployment

20120413
* export_handle: code clean up

20120412
* worked on export mode
* added export of recovered items
* change -m into -p

20120411
* added detection if wrapped flag is not set but file is wrapped
* worked on improving recovery
* added functionality to scan for records

20120410
* worked on Python bindings

20120409
* libregf now is case insensitive regarding key/value names

20120408
* updated dependencies

20120321
* fix for libexe Makefile

20120318
* worked on libsystem directory entry support

20120304
* worked on multi language support

20120302
* fixed multiple memory leaks
* added support for multi message file registy values

20120227
* worked on case insensitive path handling

20120226
* worked on formatted strings
* worked on case insensitive path handling

20120225
* 2012 update

20111124
* worked on cache handle
* added libfcache
* updated libfdata, libexe, libwrc

20111120
* updated log handle
* update libfdata, libfvalue, libfwnt, libregf

20111116
* updated libwrc

20111114
* worked on dirty file support

20111113
* code clean up
* updated array type
* updated libctring, libsystem, libfvalue
* added libexe, libregf, libwrc

20111110
* code clean up

20111101
* updated libcstring, libsystem, libuna, libbfio, libfdatetime, libfvalue
* added windows codepage 932 and 936 support
* added event id debug function
* added debug function for file flags

20111024
* removed mapi include header

20111018
* small changes

20111015
* small changes in README files

20111014
* small changes to export and info handle

20111013
* worked on initial version
* fix for building static executables on Cygwin
* updated libfvalue, libfdatetime

20111009
* worked on initial version

20111005
* worked on initial version
* updated configure and m4 scripts
* updated README files
* updated pc file
* updated spec file

20111004
* worked on initial version

20111003
* Created initial version based on libnk2

