(self, event, name)
return text
Retrieves the desired value from the EventData section of a Windows
        EVTX record.

        Args:
            event: The event to retrieve the attribute for.

        Returns:
            The value contained in the attribute.
Retrieves the desired value from the EventData section of a Windows
        EVTX record.
Retrieves the desired value from the EventData section of a Windows EVTX record .
def getEventData(self, event, name):
        """Retrieves the desired value from the EventData section of a Windows
        EVTX record.

        Args:
            event: The event to retrieve the attribute for.

        Returns:
            The value contained in the attribute.
        """
        event_data = EVENT_DATA_RE.search(
            event.source.get('xml_string')).group()
        data_name_re = re.compile(r'<Data Name="%s">([^<>]+)<\/Data>' % name)
        text = data_name_re.search(event_data).group(1)
        return text
def getEventData ( self , event , name ) : event_data = EVENT_DATA_RE . search ( event . source . get ( 'xml_string' ) ) . group ( ) data_name_re = re . compile ( r'<Data Name="%s">([^<>]+)<\/Data>' % name ) text = data_name_re . search ( event_data ) . group ( 1 ) return text