0byt3m1n1
Path:
C:
/
Windows
/
System32
/
winevt
/
Logs
/
[
Home
]
Name
Size
Permissions
Last Update
Options
[D]
inc
--
drwxrwxrwx
31-May-2025 20:14
Delete
Rename
[F]
ADAM (CWRDM).evtx
1 MB
-rw-rw-rw-
28-Jul-2026 07:27
Delete
Rename
Edit
[F]
ADAM (NAS).evtx
1 MB
-rw-rw-rw-
28-Jul-2026 07:28
Delete
Rename
Edit
[F]
Application.evtx
20 MB
-rw-rw-rw-
04-Sep-2026 10:22
Delete
Rename
Edit
[F]
DFS Replication.evtx
4.07 MB
-rw-rw-rw-
28-Jul-2026 07:28
Delete
Rename
Edit
[F]
DNS Server.evtx
1.07 MB
-rw-rw-rw-
28-Jul-2026 07:28
Delete
Rename
Edit
[F]
HardwareEvents.evtx
68 KB
-rw-rw-rw-
10-Oct-2013 08:49
Delete
Rename
Edit
[F]
Internet Explorer.evtx
68 KB
-rw-rw-rw-
10-Oct-2013 08:49
Delete
Rename
Edit
[F]
Key Management Service.evtx
68 KB
-rw-rw-rw-
10-Oct-2013 08:49
Delete
Rename
Edit
[F]
Microsoft-Rdms-UI%4Admin.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Rdms-UI%4Operational.evtx
68 KB
-rw-rw-rw-
22-May-2017 23:38
Delete
Rename
Edit
[F]
Microsoft-WS-Licensing%4Admin.evtx
68 KB
-rw-rw-rw-
20-May-2017 02:04
Delete
Rename
Edit
[F]
Microsoft-Windows-All-User-Install-Agent%4Admin.evtx
68 KB
-rw-rw-rw-
20-May-2017 02:31
Delete
Rename
Edit
[F]
Microsoft-Windows-AppHost%4Admin.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-AppID%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-AppLocker%4EXE and DLL.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-AppLocker%4MSI and Script.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-AppModel-Runtime%4Admin.evtx
68 KB
-rw-rw-rw-
28-May-2025 09:24
Delete
Rename
Edit
[F]
Microsoft-Windows-AppReadiness%4Admin.evtx
68 KB
-rw-rw-rw-
07-Sep-2023 07:08
Delete
Rename
Edit
[F]
Microsoft-Windows-AppReadiness%4Operational.evtx
1.07 MB
-rw-rw-rw-
07-Sep-2023 07:08
Delete
Rename
Edit
[F]
Microsoft-Windows-AppXDeployment%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-AppXDeploymentServer%4Operational.evtx
1.07 MB
-rw-rw-rw-
29-Jul-2026 05:00
Delete
Rename
Edit
[F]
Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx
68 KB
-rw-rw-rw-
10-Oct-2013 08:49
Delete
Rename
Edit
[F]
Microsoft-Windows-ApplicabilityEngine%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-Application Server-Applications%4Admin.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-Application Server-Applications%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-Application-Experience%4Program-Compatibility-Troubleshooter.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-Application-Experience%4Program-Inventory.evtx
1 MB
-rw-rw-rw-
21-Jul-2020 06:18
Delete
Rename
Edit
[F]
Microsoft-Windows-Application-Experience%4Program-Telemetry.evtx
1 MB
-rw-rw-rw-
28-Jul-2026 21:14
Delete
Rename
Edit
[F]
Microsoft-Windows-Application-Experience%4Steps-Recorder.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx
1 MB
-rw-rw-rw-
15-Nov-2023 23:47
Delete
Rename
Edit
[F]
Microsoft-Windows-AppxPackaging%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-Audio%4CaptureMonitor.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-Audio%4GlitchDetection.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-Audio%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-Audio%4PlaybackManager.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-Authentication User Interface%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-Backup.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-BestPractices%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-Bits-Client%4Operational.evtx
1 MB
-rw-rw-rw-
28-Jul-2026 14:58
Delete
Rename
Edit
[F]
Microsoft-Windows-CertificateServices-Deployment%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-CertificateServicesClient-Lifecycle-System%4Operational.evtx
1 MB
-rw-rw-rw-
28-Jul-2026 07:28
Delete
Rename
Edit
[F]
Microsoft-Windows-CertificateServicesClient-Lifecycle-User%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-CodeIntegrity%4Operational.evtx
68 KB
-rw-rw-rw-
11-Nov-2022 09:28
Delete
Rename
Edit
[F]
Microsoft-Windows-Compat-Appraiser%4Operational.evtx
68 KB
-rw-rw-rw-
28-Jul-2020 06:56
Delete
Rename
Edit
[F]
Microsoft-Windows-Connected-Search%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-CoreApplication%4Operational.evtx
1 MB
-rw-rw-rw-
29-Jul-2026 05:00
Delete
Rename
Edit
[F]
Microsoft-Windows-CorruptedFileRecovery-Client%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-CorruptedFileRecovery-Server%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx
68 KB
-rw-rw-rw-
10-Oct-2013 08:49
Delete
Rename
Edit
[F]
Microsoft-Windows-Crypto-DPAPI%4Operational.evtx
68 KB
-rw-rw-rw-
29-Jul-2026 05:01
Delete
Rename
Edit
[F]
Microsoft-Windows-DAL-Provider%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-DFSN-Server%4Admin.evtx
1 MB
-rw-rw-rw-
28-Jul-2026 07:28
Delete
Rename
Edit
[F]
Microsoft-Windows-DNSServer%4Audit.evtx
68 KB
-rw-rw-rw-
28-Jul-2020 06:56
Delete
Rename
Edit
[F]
Microsoft-Windows-DSC%4Admin.evtx
68 KB
-rw-rw-rw-
28-Jul-2020 06:56
Delete
Rename
Edit
[F]
Microsoft-Windows-DSC%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-DataIntegrityScan%4Admin.evtx
1 MB
-rw-rw-rw-
23-Aug-2026 00:51
Delete
Rename
Edit
[F]
Microsoft-Windows-DataIntegrityScan%4CrashRecovery.evtx
68 KB
-rw-rw-rw-
10-Oct-2013 09:03
Delete
Rename
Edit
[F]
Microsoft-Windows-DateTimeControlPanel%4Operational.evtx
68 KB
-rw-rw-rw-
21-Jun-2018 07:19
Delete
Rename
Edit
[F]
Microsoft-Windows-Deduplication%4Diagnostic.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-Deduplication%4Operational.evtx
10 MB
-rw-rw-rw-
28-Jul-2026 08:19
Delete
Rename
Edit
[F]
Microsoft-Windows-Deduplication%4Scrubbing.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-DeviceSetupManager%4Admin.evtx
1 MB
-rw-rw-rw-
30-Aug-2026 08:09
Delete
Rename
Edit
[F]
Microsoft-Windows-DeviceSetupManager%4Operational.evtx
1 MB
-rw-rw-rw-
28-Aug-2026 18:52
Delete
Rename
Edit
[F]
Microsoft-Windows-DeviceSync%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-Dhcp-Client%4Admin.evtx
68 KB
-rw-rw-rw-
20-Jun-2018 00:37
Delete
Rename
Edit
[F]
Microsoft-Windows-DhcpNap%4Admin.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-Dhcpv6-Client%4Admin.evtx
68 KB
-rw-rw-rw-
28-Jul-2026 07:27
Delete
Rename
Edit
[F]
Microsoft-Windows-Diagnosis-DPS%4Operational.evtx
1 MB
-rw-rw-rw-
28-Jul-2026 07:30
Delete
Rename
Edit
[F]
Microsoft-Windows-Diagnosis-PCW%4Operational.evtx
1 MB
-rw-rw-rw-
06-Jun-2017 20:19
Delete
Rename
Edit
[F]
Microsoft-Windows-Diagnosis-PLA%4Operational.evtx
68 KB
-rw-rw-rw-
20-May-2017 02:31
Delete
Rename
Edit
[F]
Microsoft-Windows-Diagnosis-Scripted%4Admin.evtx
68 KB
-rw-rw-rw-
06-May-2025 07:26
Delete
Rename
Edit
[F]
Microsoft-Windows-Diagnosis-Scripted%4Operational.evtx
68 KB
-rw-rw-rw-
06-May-2025 07:26
Delete
Rename
Edit
[F]
Microsoft-Windows-Diagnosis-ScriptedDiagnosticsProvider%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-Diagnostics-Networking%4Operational.evtx
68 KB
-rw-rw-rw-
06-May-2025 07:26
Delete
Rename
Edit
[F]
Microsoft-Windows-DirectoryServices-Deployment%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-EapHost%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-EapMethods-RasChap%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-EapMethods-RasTls%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-EapMethods-Ttls%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-EnrollmentPolicyWebService%4Admin.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-EnrollmentWebService%4Admin.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-EventCollector%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-FMS%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-FederationServices-Deployment%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-FileServices-ServerManager-EventProvider%4Admin.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-FileServices-ServerManager-EventProvider%4Operational.evtx
1 MB
-rw-rw-rw-
31-Aug-2022 05:43
Delete
Rename
Edit
[F]
Microsoft-Windows-FileShareShadowCopyAgent%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-FileShareShadowCopyProvider%4Operational.evtx
1 MB
-rw-rw-rw-
28-Jul-2026 07:28
Delete
Rename
Edit
[F]
Microsoft-Windows-Folder Redirection%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-Forwarding%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-GenericRoaming%4Admin.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-GroupPolicy%4Operational.evtx
3.07 MB
-rw-rw-rw-
28-Jul-2026 07:27
Delete
Rename
Edit
[F]
Microsoft-Windows-Help%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-HomeGroup Control Panel%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-IKE%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-IdCtrls%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-International%4Operational.evtx
68 KB
-rw-rw-rw-
20-May-2017 02:31
Delete
Rename
Edit
[F]
Microsoft-Windows-International-RegionalOptionsControlPanel%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-Iphlpsvc%4Operational.evtx
68 KB
-rw-rw-rw-
10-Oct-2013 09:03
Delete
Rename
Edit
[F]
Microsoft-Windows-KdsSvc%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-Kernel-ApphelpCache%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-Kernel-Boot%4Operational.evtx
68 KB
-rw-rw-rw-
10-Oct-2013 08:49
Delete
Rename
Edit
[F]
Microsoft-Windows-Kernel-EventTracing%4Admin.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-Kernel-PnP%4Configuration.evtx
1 MB
-rw-rw-rw-
03-Sep-2026 20:25
Delete
Rename
Edit
[F]
Microsoft-Windows-Kernel-PnPConfig%4Configuration.evtx
1 MB
-rw-rw-rw-
31-Aug-2026 19:09
Delete
Rename
Edit
[F]
Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx
68 KB
-rw-rw-rw-
10-Oct-2013 08:49
Delete
Rename
Edit
[F]
Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx
1 MB
-rw-rw-rw-
28-Jul-2026 07:28
Delete
Rename
Edit
[F]
Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx
68 KB
-rw-rw-rw-
10-Oct-2013 08:49
Delete
Rename
Edit
[F]
Microsoft-Windows-Kernel-WDI%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-Kernel-WHEA%4Errors.evtx
68 KB
-rw-rw-rw-
10-Oct-2013 08:49
Delete
Rename
Edit
[F]
Microsoft-Windows-Kernel-WHEA%4Operational.evtx
1 MB
-rw-rw-rw-
28-Jul-2026 07:28
Delete
Rename
Edit
[F]
Microsoft-Windows-Known Folders API Service.evtx
1 MB
-rw-rw-rw-
28-Jul-2026 07:28
Delete
Rename
Edit
[F]
Microsoft-Windows-LanguagePackSetup%4Operational.evtx
1 MB
-rw-rw-rw-
28-Jul-2026 21:14
Delete
Rename
Edit
[F]
Microsoft-Windows-MUI%4Admin.evtx
68 KB
-rw-rw-rw-
10-Oct-2013 09:03
Delete
Rename
Edit
[F]
Microsoft-Windows-MUI%4Operational.evtx
68 KB
-rw-rw-rw-
15-Nov-2023 23:47
Delete
Rename
Edit
[F]
Microsoft-Windows-MemoryDiagnostics-Results%4Debug.evtx
68 KB
-rw-rw-rw-
25-Apr-2022 09:36
Delete
Rename
Edit
[F]
Microsoft-Windows-MiStreamProvider%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-Mprddm%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-MsLbfoProvider%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-NCSI%4Operational.evtx
1 MB
-rw-rw-rw-
28-Jul-2026 07:28
Delete
Rename
Edit
[F]
Microsoft-Windows-NTLM%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-NdisImPlatform%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-NetworkAccessProtection%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-NetworkAccessProtection%4WHC.evtx
68 KB
-rw-rw-rw-
10-Oct-2013 09:03
Delete
Rename
Edit
[F]
Microsoft-Windows-NetworkLocationWizard%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-NetworkProfile%4Operational.evtx
1 MB
-rw-rw-rw-
28-Jul-2026 07:28
Delete
Rename
Edit
[F]
Microsoft-Windows-NetworkProvider%4Operational.evtx
68 KB
-rw-rw-rw-
28-Jul-2020 06:56
Delete
Rename
Edit
[F]
Microsoft-Windows-NlaSvc%4Operational.evtx
68 KB
-rw-rw-rw-
29-Mar-2025 06:50
Delete
Rename
Edit
[F]
Microsoft-Windows-Ntfs%4Operational.evtx
1 MB
-rw-rw-rw-
28-Jul-2026 07:28
Delete
Rename
Edit
[F]
Microsoft-Windows-Ntfs%4WHC.evtx
68 KB
-rw-rw-rw-
28-Jul-2026 07:28
Delete
Rename
Edit
[F]
Microsoft-Windows-OOBE-Machine-DUI%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-Policy%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-PowerShell%4Admin.evtx
68 KB
-rw-rw-rw-
20-May-2017 02:35
Delete
Rename
Edit
[F]
Microsoft-Windows-PowerShell%4Operational.evtx
1.07 MB
-rw-rw-rw-
29-Jul-2026 05:02
Delete
Rename
Edit
[F]
Microsoft-Windows-PowerShell-DesiredStateConfiguration-FileDownloadManager%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-PrintService%4Admin.evtx
1 MB
-rw-rw-rw-
07-Sep-2023 07:08
Delete
Rename
Edit
[F]
Microsoft-Windows-PushNotification-Platform%4Admin.evtx
68 KB
-rw-rw-rw-
10-Oct-2013 09:03
Delete
Rename
Edit
[F]
Microsoft-Windows-PushNotification-Platform%4Operational.evtx
1 MB
-rw-rw-rw-
21-Jul-2020 06:18
Delete
Rename
Edit
[F]
Microsoft-Windows-RasClusterResource%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-ReadyBoost%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-Regsvr32%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-ReliabilityAnalysisComponent%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-RemoteApp and Desktop Connections%4Admin.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-RemoteApp and Desktop Connections%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-RemoteDesktopServices-RdpCoreTS%4Admin.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-RemoteDesktopServices-RdpCoreTS%4Operational.evtx
1 MB
-rw-rw-rw-
28-Jul-2026 07:28
Delete
Rename
Edit
[F]
Microsoft-Windows-RemoteDesktopServices-SessionServices%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx
1 MB
-rw-rw-rw-
28-Jul-2026 07:40
Delete
Rename
Edit
[F]
Microsoft-Windows-RestartManager%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-SMBClient%4Operational.evtx
68 KB
-rw-rw-rw-
10-Oct-2013 08:49
Delete
Rename
Edit
[F]
Microsoft-Windows-SMBDirect%4Admin.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-SMBHashGeneration%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-SMBServer%4Audit.evtx
68 KB
-rw-rw-rw-
28-Jul-2020 06:56
Delete
Rename
Edit
[F]
Microsoft-Windows-SMBServer%4Connectivity.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-SMBServer%4Operational.evtx
1 MB
-rw-rw-rw-
28-Jul-2026 07:28
Delete
Rename
Edit
[F]
Microsoft-Windows-SMBServer%4Security.evtx
3.07 MB
-rw-rw-rw-
28-Jul-2026 07:27
Delete
Rename
Edit
[F]
Microsoft-Windows-SearchUI%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-Security-Audit-Configuration-Client%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-Security-Configuration-Wizard%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-Security-EnterpriseData-FileRevocationManager%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-Security-Mitigations%4KernelMode.evtx
68 KB
-rw-rw-rw-
15-Nov-2023 06:42
Delete
Rename
Edit
[F]
Microsoft-Windows-Security-Mitigations%4UserMode.evtx
68 KB
-rw-rw-rw-
15-Nov-2023 06:42
Delete
Rename
Edit
[F]
Microsoft-Windows-Security-Netlogon%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-Security-SPP-UX-GenuineCenter-Logging%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-Security-SPP-UX-Notifications%4ActionCenter.evtx
68 KB
-rw-rw-rw-
20-May-2017 02:31
Delete
Rename
Edit
[F]
Microsoft-Windows-Security-UserConsentVerifier%4Audit.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-ServerEssentials-Deployment%4Deploy.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-ServerManager-ConfigureSMRemoting%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-ServerManager-DeploymentProvider%4Operational.evtx
1 MB
-rw-rw-rw-
28-Jul-2026 19:30
Delete
Rename
Edit
[F]
Microsoft-Windows-ServerManager-MgmtProvider%4Operational.evtx
1 MB
-rw-rw-rw-
27-Aug-2026 09:50
Delete
Rename
Edit
[F]
Microsoft-Windows-ServerManager-MultiMachine%4Admin.evtx
68 KB
-rw-rw-rw-
10-Oct-2013 09:03
Delete
Rename
Edit
[F]
Microsoft-Windows-ServerManager-MultiMachine%4Operational.evtx
1 MB
-rw-rw-rw-
02-Sep-2026 03:11
Delete
Rename
Edit
[F]
Microsoft-Windows-ServicesForNFS-Client%4IdentityMapping.evtx
68 KB
-rw-rw-rw-
05-Jun-2017 07:40
Delete
Rename
Edit
[F]
Microsoft-Windows-ServicesForNFS-Client%4Operational.evtx
68 KB
-rw-rw-rw-
28-Jul-2026 07:28
Delete
Rename
Edit
[F]
Microsoft-Windows-ServicesForNFS-Portmapper%4Admin.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-ServicesForNFS-Server%4Admin.evtx
1 MB
-rw-rw-rw-
28-Jul-2026 07:28
Delete
Rename
Edit
[F]
Microsoft-Windows-ServicesForNFS-Server%4IdentityMapping.evtx
68 KB
-rw-rw-rw-
28-Jul-2026 07:28
Delete
Rename
Edit
[F]
Microsoft-Windows-ServicesForNFS-Server%4Operational.evtx
1.07 MB
-rw-rw-rw-
28-Jul-2026 07:28
Delete
Rename
Edit
[F]
Microsoft-Windows-Shell-ConnectedAccountState%4ActionCenter.evtx
68 KB
-rw-rw-rw-
10-Oct-2013 09:03
Delete
Rename
Edit
[F]
Microsoft-Windows-Shell-Core%4ActionCenter.evtx
68 KB
-rw-rw-rw-
10-Oct-2013 09:03
Delete
Rename
Edit
[F]
Microsoft-Windows-Shell-Core%4Operational.evtx
1 MB
-rw-rw-rw-
29-Jul-2026 05:00
Delete
Rename
Edit
[F]
Microsoft-Windows-SilProvider%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-SmartCard-Audit%4Authentication.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-SmartCard-DeviceEnum%4Operational.evtx
1 MB
-rw-rw-rw-
29-Jul-2026 05:00
Delete
Rename
Edit
[F]
Microsoft-Windows-SmartCard-TPM-VCard-Module%4Admin.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-SmartCard-TPM-VCard-Module%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-SmbClient%4Connectivity.evtx
1.07 MB
-rw-rw-rw-
28-Jul-2026 07:28
Delete
Rename
Edit
[F]
Microsoft-Windows-SmbClient%4Security.evtx
68 KB
-rw-rw-rw-
10-Oct-2013 08:49
Delete
Rename
Edit
[F]
Microsoft-Windows-Storage-Tiering%4Admin.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-StorageSpaces-Driver%4Diagnostic.evtx
68 KB
-rw-rw-rw-
28-Jul-2020 06:56
Delete
Rename
Edit
[F]
Microsoft-Windows-StorageSpaces-Driver%4Operational.evtx
68 KB
-rw-rw-rw-
06-Apr-2024 09:56
Delete
Rename
Edit
[F]
Microsoft-Windows-StorageSpaces-ManagementAgent%4WHC.evtx
68 KB
-rw-rw-rw-
10-Oct-2013 09:03
Delete
Rename
Edit
[F]
Microsoft-Windows-Superfetch%4AgmcOperation.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-SyncShare%4Operational.evtx
68 KB
-rw-rw-rw-
28-Jul-2026 07:28
Delete
Rename
Edit
[F]
Microsoft-Windows-SyncShare%4Reporting.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-TCPIP%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-TWinUI%4Operational.evtx
1 MB
-rw-rw-rw-
26-Sep-2025 09:16
Delete
Rename
Edit
[F]
Microsoft-Windows-TZSync%4Operational.evtx
1 MB
-rw-rw-rw-
28-Jul-2026 21:14
Delete
Rename
Edit
[F]
Microsoft-Windows-TZUtil%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-TaskScheduler%4Maintenance.evtx
1 MB
-rw-rw-rw-
28-Jul-2026 07:30
Delete
Rename
Edit
[F]
Microsoft-Windows-TerminalServices-ClientUSBDevices%4Admin.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-TerminalServices-ClientUSBDevices%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx
68 KB
-rw-rw-rw-
10-Oct-2013 08:49
Delete
Rename
Edit
[F]
Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx
1 MB
-rw-rw-rw-
28-Jul-2026 07:28
Delete
Rename
Edit
[F]
Microsoft-Windows-TerminalServices-PnPDevices%4Admin.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-TerminalServices-PnPDevices%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-TerminalServices-Printers%4Admin.evtx
1 MB
-rw-rw-rw-
29-Jul-2026 05:00
Delete
Rename
Edit
[F]
Microsoft-Windows-TerminalServices-Printers%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-TerminalServices-RDPClient%4Operational.evtx
68 KB
-rw-rw-rw-
09-May-2023 07:11
Delete
Rename
Edit
[F]
Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx
1 MB
-rw-rw-rw-
29-Jul-2026 05:00
Delete
Rename
Edit
[F]
Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx
1 MB
-rw-rw-rw-
28-Jul-2026 07:28
Delete
Rename
Edit
[F]
Microsoft-Windows-TerminalServices-ServerUSBDevices%4Admin.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-TerminalServices-ServerUSBDevices%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-TerminalServices-SessionBroker-Client%4Admin.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-TerminalServices-SessionBroker-Client%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-UAC%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-UAC-FileVirtualization%4Operational.evtx
68 KB
-rw-rw-rw-
21-Jun-2018 10:20
Delete
Rename
Edit
[F]
Microsoft-Windows-User Control Panel%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-User Profile Service%4Operational.evtx
1.07 MB
-rw-rw-rw-
29-Jul-2026 05:00
Delete
Rename
Edit
[F]
Microsoft-Windows-User-Loader%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-UserPnp%4ActionCenter.evtx
68 KB
-rw-rw-rw-
10-Oct-2013 08:49
Delete
Rename
Edit
[F]
Microsoft-Windows-UserPnp%4DeviceInstall.evtx
68 KB
-rw-rw-rw-
03-Sep-2026 21:15
Delete
Rename
Edit
[F]
Microsoft-Windows-VDRVROOT%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-VHDMP%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-VPN%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-VPN-Client%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-VerifyHardwareSecurity%4Admin.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-WER-Diag%4Operational.evtx
68 KB
-rw-rw-rw-
03-Sep-2026 15:13
Delete
Rename
Edit
[F]
Microsoft-Windows-WFP%4Operational.evtx
68 KB
-rw-rw-rw-
23-Oct-2024 05:19
Delete
Rename
Edit
[F]
Microsoft-Windows-WMI-Activity%4Operational.evtx
1 MB
-rw-rw-rw-
28-Jul-2026 07:28
Delete
Rename
Edit
[F]
Microsoft-Windows-Wcmsvc%4Operational.evtx
1 MB
-rw-rw-rw-
28-Jul-2026 07:28
Delete
Rename
Edit
[F]
Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx
68 KB
-rw-rw-rw-
12-Sep-2026 06:48
Delete
Rename
Edit
[F]
Microsoft-Windows-WinRM%4Operational.evtx
1 MB
-rw-rw-rw-
28-Jul-2026 07:28
Delete
Rename
Edit
[F]
Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx
68 KB
-rw-rw-rw-
10-Oct-2013 09:03
Delete
Rename
Edit
[F]
Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx
1 MB
-rw-rw-rw-
28-Jul-2026 07:28
Delete
Rename
Edit
[F]
Microsoft-Windows-WindowsUpdateClient%4Operational.evtx
1 MB
-rw-rw-rw-
05-Feb-2024 11:03
Delete
Rename
Edit
[F]
Microsoft-Windows-Winlogon%4Operational.evtx
68 KB
-rw-rw-rw-
10-Oct-2013 09:03
Delete
Rename
Edit
[F]
Microsoft-Windows-Winsock-WS2HELP%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-Wired-AutoConfig%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-Workplace Join%4Admin.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-iSCSITarget-Service%4Admin.evtx
1 MB
-rw-rw-rw-
28-Jul-2026 07:28
Delete
Rename
Edit
[F]
Microsoft-Windows-iSCSITarget-Service%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-iSCSITarget-VDSProvider%4Admin.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-iSCSITarget-VDSProvider%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-iSCSITarget-VSSProvider%4Admin.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
Microsoft-Windows-iSCSITarget-VSSProvider%4Operational.evtx
68 KB
-rw-rw-rw-
19-May-2017 22:45
Delete
Rename
Edit
[F]
ODiag.evtx
68 KB
-rw-rw-rw-
22-Jun-2021 10:49
Delete
Rename
Edit
[F]
OSession.evtx
68 KB
-rw-rw-rw-
12-Jul-2024 17:15
Delete
Rename
Edit
[F]
Security.evtx
20 MB
-rw-rw-rw-
28-Jul-2026 07:27
Delete
Rename
Edit
[F]
Setup.evtx
1 MB
-rw-rw-rw-
30-Nov-2023 10:17
Delete
Rename
Edit
[F]
System.evtx
20 MB
-rw-rw-rw-
28-Jul-2026 07:27
Delete
Rename
Edit
[F]
Windows PowerShell.evtx
2.07 MB
-rw-rw-rw-
29-Jul-2026 05:02
Delete
Rename
Edit
[F]
WitnessClientAdmin.evtx
68 KB
-rw-rw-rw-
20-May-2017 02:31
Delete
Rename
Edit