evtx

package

Go to main page

Versions in this module

v1

v1.2.9

Sep 26, 2021

v1.2.8

Jun 15, 2021

v1.2.7

Feb 2, 2021

v1.2.6

Feb 2, 2021

v1.2.5

Jan 14, 2021

Changes in this version

+ var Debug = false

+ func SetDebug(value bool)

v1.2.4

Jul 10, 2020

Changes in this version

+ var ErrCorruptedHeader = fmt.Errorf("Corrupted header")

+ var ErrDirtyFile = fmt.Errorf("File is flagged as dirty")

+ var ErrRepairFailed = fmt.Errorf("File header could not be repaired")

type File

+ func OpenDirty(filepath string) (ef File, err error)

type FileHeader

+ func (f *FileHeader) Repair(r io.ReadSeeker) error

+ func (f *FileHeader) Verify() error

v1.2.3

Sep 28, 2019

v1.2.1

May 20, 2019

v1.2.0

Mar 21, 2019

v1.1.0

Mar 21, 2019

Changes in this version

+ const AnsiStringType

+ const ArrayType

+ const BinXmlType

+ const BinaryType

+ const BoolType

+ const ChunkHeaderSize

+ const ChunkMagic

+ const ChunkSize

+ const DefaultNameOffset

+ const EventHeaderSize

+ const EventMagic

+ const EvtHandle

+ const EvtXml

+ const EvtxMagic

+ const FileTimeType

+ const FragmentHeaderToken

+ const GuidType

+ const HexInt32Type

+ const HexInt64Type

+ const Int16Type

+ const Int32Type

+ const Int64Type

+ const Int8Type

+ const MaxSliceSize

+ const NullType

+ const Real32Type

+ const Real64Type

+ const SidType

+ const SizeTType

+ const StringType

+ const SysTimeType

+ const TokenAttribute1

+ const TokenAttribute2

+ const TokenCDataSection1

+ const TokenCDataSection2

+ const TokenCharRef1

+ const TokenCharRef2

+ const TokenCloseEmptyElementTag

+ const TokenCloseStartElementTag

+ const TokenEOF

+ const TokenEndElementTag

+ const TokenEntityRef1

+ const TokenEntityRef2

+ const TokenNormalSubstitution

+ const TokenOpenStartElementTag1

+ const TokenOpenStartElementTag2

+ const TokenOptionalSubstitution

+ const TokenPIData

+ const TokenPITarget

+ const TokenTemplateInstance

+ const TokenValue1

+ const TokenValue2

+ const UInt16Type

+ const UInt32Type

+ const UInt64Type

+ const UInt8Type

+ var ChannelPath = Path("/Event/System/Channel")

+ var DefaultMonitorSleep = 250 * time.Millisecond

+ var Endianness = binary.LittleEndian

+ var ErrBadChunkMagic = errors.New("Bad chunk magic")

+ var ErrBadChunkSize = errors.New("Bad chunk size")

+ var ErrBadEvtxFile = errors.New("Bad file magic")

+ var ErrInvalidEvent = errors.New("Error Invalid Event")

+ var ErrTokenEOF = errors.New("TokenEOF")

+ var EventIDPath = Path("/Event/System/EventID")

+ var EventIDPath2 = Path("/Event/System/EventID/Value")

+ var EventRecordIDPath = Path("/Event/System/EventRecordID")

+ var MaxJobs = int(math.Floor(float64(runtime.NumCPU()) / 2))

+ var ModeCarving = false

+ var PathSeparator = "/"

+ var SystemTimePath = Path("/Event/System/TimeCreated/SystemTime")

+ var UTF16EndOfString = uint16(0x0)

+ var UserIDPath = Path("/Event/System/Security/UserID")

+ var XmlnsPath = Path("/Event/xmlns")

+ func BackupSeeker(seeker io.Seeker) int64

+ func DebugReader(reader io.ReadSeeker, before, after int64)

+ func GoToSeeker(seeker io.Seeker, offset int64)

+ func ReadSeekerSize(reader io.ReadSeeker) int64

+ func RelGoToSeeker(seeker io.Seeker, offset int64)

+ func SetMaxJobs(jobs int)

+ func SetModeCarving(value bool)

+ func SetMonitorSleep(d time.Duration)

+ func ToJSON(data interface{}) []byte

+ func UpdateLastElements(e Element)

+ type AnsiString struct

+ Size uint16

+ func (as *AnsiString) Parse(reader io.ReadSeeker) error

+ func (as *AnsiString) Repr() interface{}

+ func (as *AnsiString) String() string

+ func (as *AnsiString) Value() interface{}

+ type Attribute struct

+ AttributeData Element

+ Name Name

+ NameOffset int32

+ Token int8

+ func (a *Attribute) IsLast() bool

+ func (a *Attribute) Parse(reader io.ReadSeeker) error

+ type AttributeData interface

+ IsAttributeData func() bool

+ String func() string

+ type AttributeList struct

+ Attributes []Attribute

+ Size int32

+ func (al *AttributeList) Parse(reader io.ReadSeeker) error

+ func (al *AttributeList) ParseAttributes(reader io.ReadSeeker) error

+ func (al *AttributeList) ParseSize(reader io.ReadSeeker) error

+ type BinXMLCloseEmptyElementTag struct

+ type BinXMLCloseStartElementTag struct

+ type BinXMLEOF struct

+ Token int8

+ func (b *BinXMLEOF) Parse(reader io.ReadSeeker) error

+ type BinXMLEndElementTag struct

+ type BinXMLEntityReference struct

+ Name Name

+ NameOffset uint32

+ Token int8

+ func (e *BinXMLEntityReference) Parse(reader io.ReadSeeker) error

+ func (e *BinXMLEntityReference) String() string

+ type CDATASection struct

+ Text UnicodeTextString

+ Token int8

+ type CharEntityRef struct

+ Token int8

+ Value int16

+ func (cer *CharEntityRef) Parse(reader io.ReadSeeker) error

+ type Chunk struct

+ Data []byte

+ EventOffsets []int32

+ Header ChunkHeader

+ Offset int64

+ StringTable ChunkStringTable

+ TemplateTable TemplateTable

+ func NewChunk() Chunk

+ func (c *Chunk) Events() (cgem chan *GoEvtxMap)

+ func (c *Chunk) ParseChunkHeader(reader io.ReadSeeker)

+ func (c *Chunk) ParseEvent(offset int64) (e Event)

+ func (c *Chunk) ParseEventOffsets(reader io.ReadSeeker) (err error)

+ func (c *Chunk) ParseStringTable(reader io.ReadSeeker)

+ func (c *Chunk) ParseTemplateTable(reader io.ReadSeeker) error

+ func (c Chunk) Less(s *datastructs.Sortable) bool

+ func (c Chunk) String() string

+ type ChunkCache struct

+ type ChunkHeader struct

+ CheckSum uint32

+ FirstEventRecID int64

+ Freespace int32

+ LastEventRecID int64

+ Magic [8]byte

+ NumFirstRecLog int64

+ NumLastRecLog int64

+ OffsetLastRec int32

+ SizeHeader int32

+ func (ch *ChunkHeader) Validate() error

+ func (ch ChunkHeader) String() string

+ type ChunkSorter []Chunk

+ func (cs ChunkSorter) Len() int

+ func (cs ChunkSorter) Less(i, j int) bool

+ func (cs ChunkSorter) Swap(i, j int)

+ type ChunkString struct

+ func StringAt(reader io.ReadSeeker, offset int64) (cs ChunkString, err error)

+ type ChunkStringTable map[int32]ChunkString

+ type Content interface

+ type ContentStringData interface

+ type Element interface

+ Parse func(reader io.ReadSeeker) error

+ func Parse(reader io.ReadSeeker, c *Chunk, tiFlag bool) (Element, error)

+ func ParseValueReader(vd ValueDescriptor, reader io.ReadSeeker) (Element, error)

+ type ElementStart struct

+ AttributeList AttributeList

+ DepID int16

+ EOESToken uint8

+ IsTemplateInstance bool

+ Name Name

+ NameOffset int32

+ Offset int64

+ Size int32

+ Token int8

+ func (es *ElementStart) HasName() bool

+ func (es *ElementStart) Parse(reader io.ReadSeeker) (err error)

+ func (es ElementStart) String() string

+ type EmptyElement struct

+ func (EmptyElement) Parse(reader io.ReadSeeker) error

+ type EntityReference struct

+ EntityNameOffset int32

+ Token int8

+ type ErrEvtxEltNotFound struct

+ func (e *ErrEvtxEltNotFound) Error() string

+ type ErrUnknownToken struct

+ Token uint8

+ func (e ErrUnknownToken) Error() string

+ type Event struct

+ Header EventHeader

+ Offset int64

+ func (e *Event) IsValid() bool

+ func (e Event) GoEvtxMap(c *Chunk) (pge *GoEvtxMap, err error)

+ func (e Event) String() string

+ type EventHeader struct

+ ID int64

+ Magic [4]byte

+ Size int32

+ Timestamp FileTime

+ func (h *EventHeader) Validate() error

+ type EventIDType int64

+ type File struct

+ Header FileHeader

+ func New(filepath string) (ef File, err error)

+ func Open(filepath string) (ef File, err error)

+ func (ef *File) Chunks() (cc chan Chunk)

+ func (ef *File) Close() error

+ func (ef *File) Events() (cgem chan *GoEvtxMap)

+ func (ef *File) FastEvents() (cgem chan *GoEvtxMap)

+ func (ef *File) FetchChunk(offset int64) (Chunk, error)

+ func (ef *File) FetchRawChunk(offset int64) (Chunk, error)

+ func (ef *File) MonitorEvents(stop chan bool, sleep ...time.Duration) (cgem chan *GoEvtxMap)

+ func (ef *File) ParseFileHeader()

+ func (ef *File) SetMonitorExisting(value bool)

+ func (ef *File) UnorderedChunks() (cc chan Chunk)

+ func (ef *File) UnorderedEvents() (cgem chan *GoEvtxMap)

+ type FileHeader struct

+ CheckSum uint32

+ ChunkCount uint16

+ ChunkDataOffset uint16

+ FirstChunkNum uint64

+ Flags uint32

+ HeaderSpace uint32

+ LastChunkNum uint64

+ Magic [8]byte

+ MajVersion uint16

+ MinVersion uint16

+ NextRecordID uint64

+ Unknown [76]byte

+ func (fh FileHeader) String() string

+ type FileTime struct

+ Nanoseconds int64

+ func (s *FileTime) String() string

+ func (s *FileTime) Time() UTCTime

+ func (v *FileTime) Convert() float64

+ type Fragment struct

+ BinXMLElement Element

+ Header FragmentHeader

+ Offset int64

+ func (f *Fragment) GoEvtxMap() *GoEvtxMap

+ func (f *Fragment) Parse(reader io.ReadSeeker) error

+ func (f Fragment) String() string

+ type FragmentHeader struct

+ Flags int8

+ MajVersion int8

+ MinVersion int8

+ Token int8

+ func (fh *FragmentHeader) Parse(reader io.ReadSeeker) error

+ func (fh FragmentHeader) String() string

+ type GUID [16]byte

+ func (g *GUID) String() string

+ type GoEvtxElement interface

+ func ElementToGoEvtx(elt Element) GoEvtxElement

+ type GoEvtxMap map[string]interface

+ func (pg *GoEvtxMap) Add(other GoEvtxMap)

+ func (pg *GoEvtxMap) After(t time.Time) bool

+ func (pg *GoEvtxMap) AnyEqual(path *GoEvtxPath, is []interface{}) bool

+ func (pg *GoEvtxMap) At(t time.Time) bool

+ func (pg *GoEvtxMap) Before(t time.Time) bool

+ func (pg *GoEvtxMap) Between(t1, t2 time.Time) bool

+ func (pg *GoEvtxMap) Channel() string

+ func (pg *GoEvtxMap) Del(path ...string)

+ func (pg *GoEvtxMap) DelXmlns()

+ func (pg *GoEvtxMap) Equal(path *GoEvtxPath, i interface{}) bool

+ func (pg *GoEvtxMap) EventID() int64

+ func (pg *GoEvtxMap) EventRecordID() int64

+ func (pg *GoEvtxMap) Get(path *GoEvtxPath) (*GoEvtxElement, error)

+ func (pg *GoEvtxMap) GetBool(path *GoEvtxPath) (bool, error)

+ func (pg *GoEvtxMap) GetBoolStrict(path *GoEvtxPath) bool

+ func (pg *GoEvtxMap) GetInt(path *GoEvtxPath) (int64, error)

+ func (pg *GoEvtxMap) GetIntStrict(path *GoEvtxPath) int64

+ func (pg *GoEvtxMap) GetMap(path *GoEvtxPath) (*GoEvtxMap, error)

+ func (pg *GoEvtxMap) GetMapStrict(path *GoEvtxPath) *GoEvtxMap

+ func (pg *GoEvtxMap) GetMapWhere(path *GoEvtxPath, value interface{}) (*GoEvtxMap, error)

+ func (pg *GoEvtxMap) GetMapWhereStrict(path *GoEvtxPath, value interface{}) *GoEvtxMap

+ func (pg *GoEvtxMap) GetStrict(path *GoEvtxPath) *GoEvtxElement

+ func (pg *GoEvtxMap) GetString(path *GoEvtxPath) (string, error)

+ func (pg *GoEvtxMap) GetStringStrict(path *GoEvtxPath) string

+ func (pg *GoEvtxMap) GetTime(path *GoEvtxPath) (time.Time, error)

+ func (pg *GoEvtxMap) GetTimeStrict(path *GoEvtxPath) time.Time

+ func (pg *GoEvtxMap) GetUint(path *GoEvtxPath) (uint64, error)

+ func (pg *GoEvtxMap) GetUintStrict(path *GoEvtxPath) uint64

+ func (pg *GoEvtxMap) HasKeys(keys ...string) bool

+ func (pg *GoEvtxMap) IsEventID(eids ...interface{}) bool

+ func (pg *GoEvtxMap) RegexMatch(path *GoEvtxPath, pattern *regexp.Regexp) bool

+ func (pg *GoEvtxMap) Set(path *GoEvtxPath, new GoEvtxElement) error

+ func (pg *GoEvtxMap) TimeCreated() time.Time

+ func (pg *GoEvtxMap) UserID() (userID string, ok bool)

+ type GoEvtxPath []string

+ func Path(s string) GoEvtxPath

+ func (p GoEvtxPath) String() string

+ type Name struct

+ Hash uint16

+ OffsetPrevString int32

+ Size uint16

+ UTF16String UTF16String

+ func (n *Name) Parse(reader io.ReadSeeker) error

+ func (n *Name) String() string

+ type Node struct

+ Child []*Node

+ Element []Element

+ Start *ElementStart

+ func NodeTree(es []Element, index int) (Node, int)

+ type NormalSubstitution struct

+ SubID int16

+ Token int8

+ ValType int8

+ func (n *NormalSubstitution) IsAttributeData() bool

+ func (n *NormalSubstitution) Parse(reader io.ReadSeeker) error

+ func (n *NormalSubstitution) String() string

+ type OptionalSubstitution struct

+ type PI interface

+ type PIData struct

+ Text UnicodeTextString

+ Token int8

+ type PITarget struct

+ NameOffset int32

+ Token int8

+ type Sid struct

+ IdentifierAuthority [6]uint8

+ Revision uint8

+ SubAuthority []uint32

+ SubAuthorityCount uint8

+ type Substitution interface

+ type SysTime struct

+ DayOfMonth int16

+ DayOfWeek int16

+ Hours int16

+ Milliseconds int16

+ Minutes int16

+ Month int16

+ Seconds int16

+ Year int16

+ func (s *SysTime) String() string

+ type TemplateDefinition struct

+ Data TemplateDefinitionData

+ Header TemplateDefinitionHeader

+ func (td *TemplateDefinition) Parse(reader io.ReadSeeker) error

+ func (td TemplateDefinition) String() string

+ type TemplateDefinitionData struct

+ EOFToken int8

+ Elements []Element

+ FragHeader FragmentHeader

+ ID [16]byte

+ Size int32

+ Unknown3 int32

+ func (td *TemplateDefinitionData) Parse(reader io.ReadSeeker) error

+ type TemplateDefinitionHeader struct

+ DataOffset int32

+ Unknown1 int8

+ Unknown2 int32

+ func (tdh *TemplateDefinitionHeader) Parse(reader io.ReadSeeker) error

+ type TemplateInstance struct

+ Data TemplateInstanceData

+ Definition TemplateDefinition

+ Token int8

+ func (ti *TemplateInstance) DataOffset(reader io.ReadSeeker) (offset int32, err error)

+ func (ti *TemplateInstance) ElementToGoEvtx(elt Element) GoEvtxElement

+ func (ti *TemplateInstance) GoEvtxMap() *GoEvtxMap

+ func (ti *TemplateInstance) NodeToGoEvtx(n *Node) GoEvtxMap

+ func (ti *TemplateInstance) Parse(reader io.ReadSeeker) error

+ func (ti *TemplateInstance) ParseTemplateDefinitionHeader(reader io.ReadSeeker) error

+ func (ti *TemplateInstance) Root() Node

+ func (ti TemplateInstance) String() string

+ type TemplateInstanceData struct

+ NumValues int32

+ ValDescs []ValueDescriptor

+ ValueOffsets []int32

+ Values []Element

+ func (tid *TemplateInstanceData) Parse(reader io.ReadSeeker) error

+ type TemplateTable map[int32]TemplateDefinitionData

+ type Token struct

+ Token int8

+ func (t *Token) Parse(reader io.ReadSeeker) error

+ type UTCTime time.Time

+ func (u UTCTime) MarshalJSON() ([]byte, error)

+ type UTF16 uint16

+ type UTF16String []uint16

+ func (us *UTF16String) Len() int32

+ func (us UTF16String) ToString() string

+ type UnicodeTextString struct

+ Size int16

+ String UTF16String

+ func (uts *UnicodeTextString) GetSize() int32

+ func (uts *UnicodeTextString) Parse(reader io.ReadSeeker) error

+ type UnkVal struct

+ Desc ValueDescriptor

+ Offset int64

+ Token ValueType

+ func (*UnkVal) Parse(reader io.ReadSeeker) error

+ func (u *UnkVal) Repr() interface{}

+ func (u *UnkVal) String() string

+ func (u *UnkVal) Value() interface{}

+ type Value interface

+ Repr func() interface{}

+ String func() string

+ Value func() interface{}

+ type ValueArrayUInt16 struct

+ Size uint16

+ func (a *ValueArrayUInt16) Parse(reader io.ReadSeeker) error

+ func (a *ValueArrayUInt16) Repr() interface{}

+ func (a *ValueArrayUInt16) String() string

+ func (a *ValueArrayUInt16) Value() interface{}

+ type ValueArrayUInt64 struct

+ Size uint16

+ func (a *ValueArrayUInt64) Parse(reader io.ReadSeeker) error

+ func (a *ValueArrayUInt64) Repr() interface{}

+ func (a *ValueArrayUInt64) String() string

+ func (a *ValueArrayUInt64) Value() interface{}

+ type ValueBinary struct

+ Size uint16

+ func (b *ValueBinary) Parse(reader io.ReadSeeker) error

+ func (b *ValueBinary) Repr() interface{}

+ func (b *ValueBinary) String() string

+ func (b *ValueBinary) Value() interface{}

+ type ValueBool struct

+ func (b *ValueBool) Repr() interface{}

+ func (b *ValueBool) String() string

+ func (b *ValueBool) Value() interface{}

+ type ValueData []byte

+ type ValueDescriptor struct

+ Size uint16

+ Unknown int8

+ ValType ValueType

+ func (v ValueDescriptor) String() string

+ type ValueFileTime struct

+ func (s *ValueFileTime) Parse(reader io.ReadSeeker) error

+ func (s *ValueFileTime) Repr() interface{}

+ func (s *ValueFileTime) String() string

+ func (s *ValueFileTime) Value() interface{}

+ type ValueGUID struct

+ func (g *ValueGUID) Parse(reader io.ReadSeeker) error

+ func (g *ValueGUID) Repr() interface{}

+ func (g *ValueGUID) String() string

+ func (g *ValueGUID) Value() interface{}

+ type ValueHexInt32 struct

+ func (i *ValueHexInt32) Repr() interface{}

+ func (i *ValueHexInt32) String() string

+ func (i *ValueHexInt32) Value() interface{}

+ type ValueHexInt64 struct

+ func (i *ValueHexInt64) Repr() interface{}

+ func (i *ValueHexInt64) String() string

+ func (i *ValueHexInt64) Value() interface{}

+ type ValueInt16 struct

+ func (i *ValueInt16) Parse(reader io.ReadSeeker) error

+ func (i *ValueInt16) Repr() interface{}

+ func (i *ValueInt16) String() string

+ func (i *ValueInt16) Value() interface{}

+ type ValueInt32 struct

+ func (i *ValueInt32) Parse(reader io.ReadSeeker) error

+ func (i *ValueInt32) Repr() interface{}

+ func (i *ValueInt32) String() string

+ func (i *ValueInt32) Value() interface{}

+ type ValueInt64 struct

+ func (i *ValueInt64) Parse(reader io.ReadSeeker) error

+ func (i *ValueInt64) Repr() interface{}

+ func (i *ValueInt64) String() string

+ func (i *ValueInt64) Value() interface{}

+ type ValueInt8 struct

+ func (i *ValueInt8) Parse(reader io.ReadSeeker) error

+ func (i *ValueInt8) Repr() interface{}

+ func (i *ValueInt8) String() string

+ func (i *ValueInt8) Value() interface{}

+ type ValueNull struct

+ Size uint16

+ func (ValueNull) Repr() interface{}

+ func (ValueNull) String() string

+ func (ValueNull) Value() interface{}

+ func (n *ValueNull) Parse(reader io.ReadSeeker) error

+ type ValueReal32 struct

+ func (v *ValueReal32) Parse(reader io.ReadSeeker) error

+ func (v *ValueReal32) Repr() interface{}

+ func (v *ValueReal32) String() string

+ func (v *ValueReal32) Value() interface{}

+ type ValueReal64 struct

+ func (v *ValueReal64) Parse(reader io.ReadSeeker) error

+ func (v *ValueReal64) Repr() interface{}

+ func (v *ValueReal64) String() string

+ func (v *ValueReal64) Value() interface{}

+ type ValueSID struct

+ func (g *ValueSID) Parse(reader io.ReadSeeker) error

+ func (g *ValueSID) Repr() interface{}

+ func (g *ValueSID) String() string

+ func (g *ValueSID) Value() interface{}

+ type ValueString struct

+ Size uint16

+ func (s *ValueString) Parse(reader io.ReadSeeker) error

+ func (s *ValueString) Repr() interface{}

+ func (s *ValueString) String() string

+ func (s *ValueString) Value() interface{}

+ type ValueStringTable struct

+ Size uint16

+ func (st *ValueStringTable) Bytes() []byte

+ func (st *ValueStringTable) Parse(reader io.ReadSeeker) error

+ func (st *ValueStringTable) Repr() interface{}

+ func (st *ValueStringTable) String() string

+ func (st *ValueStringTable) Value() interface{}

+ type ValueSysTime struct

+ func (s *ValueSysTime) Parse(reader io.ReadSeeker) error

+ func (s *ValueSysTime) Repr() interface{}

+ func (s *ValueSysTime) String() string

+ func (s *ValueSysTime) Time() UTCTime

+ func (s *ValueSysTime) Value() interface{}

+ type ValueText struct

+ Token int8

+ ValType int8

+ Value UnicodeTextString

+ func (vt *ValueText) IsAttributeData() bool

+ func (vt *ValueText) Parse(reader io.ReadSeeker) error

+ func (vt *ValueText) String() string

+ type ValueType uint8

+ func (v *ValueType) IsArray() bool

+ func (v *ValueType) IsArrayOf(tvt ValueType) bool

+ func (v *ValueType) IsType(tvt ValueType) bool

+ type ValueUInt16 struct

+ func (u *ValueUInt16) Parse(reader io.ReadSeeker) error

+ func (u *ValueUInt16) Repr() interface{}

+ func (u *ValueUInt16) String() string

+ func (u *ValueUInt16) Value() interface{}

+ type ValueUInt32 struct

+ func (u *ValueUInt32) Parse(reader io.ReadSeeker) error

+ func (u *ValueUInt32) Repr() interface{}

+ func (u *ValueUInt32) String() string

+ func (u *ValueUInt32) Value() interface{}

+ type ValueUInt64 struct

+ func (u *ValueUInt64) Parse(reader io.ReadSeeker) error

+ func (u *ValueUInt64) Repr() interface{}

+ func (u *ValueUInt64) String() string

+ func (u *ValueUInt64) Value() interface{}

+ type ValueUInt8 struct

+ func (u *ValueUInt8) Parse(reader io.ReadSeeker) error

+ func (u *ValueUInt8) Repr() interface{}

+ func (u *ValueUInt8) String() string

+ func (u *ValueUInt8) Value() interface{}

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL