Just pushed tag v0.3.0 of python-evtx live. More robust and much (3x) faster! https://github.com/williballenthin/python-evtx