Template

A skeleton XML document with substitution placeholders. The chunk's template table is parsed once; each record contributes only the values that fill the placeholders. This is how .evtx achieves its compression — the constant text is stored once per chunk.