mark-hallman / Process-EventLogs

Process select Event Logs and Event ID's with EvtxECmd

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Process-EventLogs

Process select Event Logs and Event ID's with EvtxECmd

PS > .\Process-Evtx.ps1 -source <source_dir> -dest <dest_dir> -logs

PS > .\Process-Evtx.ps1 -source E:\C\Windows\system32\winevt\logs -dest G:\extracted_winevt -logs .\EventLogs2Process.txt

About

Process select Event Logs and Event ID's with EvtxECmd


Languages

Language:PowerShell 100.0%