Index of C:\Windows\System32\winevt\Logs |
 Up one directory... |
|
|
 Application.evtx | 11,332 KB | 4/10/2026 8:13 AM |
| HardwareEvents.evtx | 68 KB | 2/11/2024 1:28 AM |
| Internet Explorer.evtx | 68 KB | 2/11/2024 1:28 AM |
| Key Management Service.evtx | 68 KB | 2/11/2024 1:28 AM |
| Microsoft-Client-Licensing-Platform%4Admin.evtx | 1,028 KB | 4/10/2026 7:45 AM |
| Microsoft-Windows-AAD%4Operational.evtx | 68 KB | 10/1/2025 10:01 AM |
| Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx | 68 KB | 3/27/2026 8:16 PM |
| Microsoft-Windows-Application-Experience%4Program-Compatibility-Troubleshooter.evtx | 68 KB | 2/10/2024 2:47 PM |
| Microsoft-Windows-Application-Experience%4Program-Inventory.evtx | 68 KB | 2/10/2024 2:47 PM |
| Microsoft-Windows-Application-Experience%4Program-Telemetry.evtx | 1,028 KB | 3/31/2026 7:11 AM |
| Microsoft-Windows-Application-Experience%4Steps-Recorder.evtx | 68 KB | 2/10/2024 2:47 PM |
| Microsoft-Windows-AppModel-Runtime%4Admin.evtx | 1,028 KB | 4/10/2026 3:39 AM |
| Microsoft-Windows-AppReadiness%4Admin.evtx | 1,092 KB | 3/29/2026 10:44 AM |
| Microsoft-Windows-AppReadiness%4Operational.evtx | 1,092 KB | 3/29/2026 10:44 AM |
| Microsoft-Windows-AppXDeployment%4Operational.evtx | 1,028 KB | 4/10/2026 7:39 AM |
| Microsoft-Windows-AppXDeploymentServer%4Operational.evtx | 5,124 KB | 4/9/2026 11:10 AM |
| Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx | 68 KB | 2/11/2024 1:28 AM |
| Microsoft-Windows-AppxPackaging%4Operational.evtx | 1,028 KB | 3/29/2026 10:48 AM |
| Microsoft-Windows-Audio%4CaptureMonitor.evtx | 68 KB | 2/11/2024 1:28 AM |
| Microsoft-Windows-Audio%4Operational.evtx | 68 KB | 11/19/2024 9:55 AM |
| Microsoft-Windows-Audio%4PlaybackManager.evtx | 1,028 KB | 3/27/2026 8:16 PM |
| Microsoft-Windows-Authentication User Interface%4Operational.evtx | 68 KB | 2/10/2024 2:47 PM |
| Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx | 68 KB | 3/27/2026 8:16 PM |
| Microsoft-Windows-Biometrics%4Operational.evtx | 68 KB | 3/27/2026 8:16 PM |
| Microsoft-Windows-BitLocker%4BitLocker Management.evtx | 68 KB | 3/29/2026 4:39 AM |
| Microsoft-Windows-Bits-Client%4Operational.evtx | 1,028 KB | 4/10/2026 8:31 AM |
| Microsoft-Windows-CloudStore%4Operational.evtx | 1,028 KB | 3/29/2026 10:44 AM |
| Microsoft-Windows-CodeIntegrity%4Operational.evtx | 68 KB | 3/29/2026 2:13 AM |
| Microsoft-Windows-Containers-BindFlt%4Operational.evtx | 68 KB | 3/29/2026 2:13 AM |
| Microsoft-Windows-Containers-Wcifs%4Operational.evtx | 68 KB | 3/29/2026 2:13 AM |
| Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx | 68 KB | 2/11/2024 1:28 AM |
| Microsoft-Windows-Crypto-DPAPI%4Operational.evtx | 1,028 KB | 4/9/2026 7:12 AM |
| Microsoft-Windows-Crypto-NCrypt%4Operational.evtx | 1,028 KB | 4/9/2026 7:20 AM |
| Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx | 68 KB | 3/29/2026 10:49 AM |
| Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Operational.evtx | 68 KB | 3/29/2026 10:48 AM |
| Microsoft-Windows-DeviceSetupManager%4Admin.evtx | 1,028 KB | 4/9/2026 7:12 AM |
| Microsoft-Windows-DeviceSetupManager%4Operational.evtx | 1,028 KB | 4/9/2026 7:12 AM |
| Microsoft-Windows-Dhcp-Client%4Admin.evtx | 68 KB | 11/19/2024 9:55 AM |
| Microsoft-Windows-Dhcpv6-Client%4Admin.evtx | 68 KB | 2/11/2024 1:28 AM |
| Microsoft-Windows-Diagnosis-DPS%4Operational.evtx | 1,028 KB | 3/29/2026 2:13 AM |
| Microsoft-Windows-Diagnosis-Scheduled%4Operational.evtx | 1,028 KB | 3/30/2026 4:13 AM |
| Microsoft-Windows-Diagnosis-Scripted%4Admin.evtx | 68 KB | 3/30/2026 4:13 AM |
| Microsoft-Windows-Diagnosis-Scripted%4Operational.evtx | 68 KB | 3/30/2026 4:13 AM |
| Microsoft-Windows-Diagnostics-Performance%4Operational.evtx | 68 KB | 3/27/2026 8:16 PM |
| Microsoft-Windows-DiskDiagnosticDataCollector%4Operational.evtx | 68 KB | 9/29/2025 7:27 AM |
| Microsoft-Windows-FileHistory-Core%4WHC.evtx | 68 KB | 2/10/2024 2:47 PM |
| Microsoft-Windows-GroupPolicy%4Operational.evtx | 4,100 KB | 4/10/2026 8:30 AM |
| Microsoft-Windows-HelloForBusiness%4Operational.evtx | 1,028 KB | 3/29/2026 2:13 AM |
| Microsoft-Windows-HotspotAuth%4Operational.evtx | 68 KB | 2/11/2024 1:28 AM |
| Microsoft-Windows-IKE%4Operational.evtx | 68 KB | 2/11/2024 1:28 AM |
| Microsoft-Windows-Kernel-Boot%4Operational.evtx | 68 KB | 3/29/2026 2:13 AM |
| Microsoft-Windows-Kernel-EventTracing%4Admin.evtx | 68 KB | 3/29/2026 10:44 AM |
| Microsoft-Windows-Kernel-PnP%4Configuration.evtx | 1,028 KB | 4/9/2026 6:58 PM |
| Microsoft-Windows-Kernel-PnP%4Driver Watchdog.evtx | 68 KB | 2/11/2024 1:28 AM |
| Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx | 68 KB | 2/11/2024 1:28 AM |
| Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx | 68 KB | 9/29/2025 9:34 AM |
| Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx | 68 KB | 2/11/2024 1:28 AM |
| Microsoft-Windows-Kernel-WHEA%4Errors.evtx | 68 KB | 2/11/2024 1:28 AM |
| Microsoft-Windows-Kernel-WHEA%4Operational.evtx | 1,092 KB | 3/29/2026 2:13 AM |
| Microsoft-Windows-Known Folders API Service.evtx | 1,028 KB | 3/29/2026 4:45 AM |
| Microsoft-Windows-LanguagePackSetup%4Operational.evtx | 68 KB | 3/29/2026 4:13 AM |
| Microsoft-Windows-LiveId%4Operational.evtx | 1,028 KB | 4/8/2026 4:47 PM |
| Microsoft-Windows-ModernDeployment-Diagnostics-Provider%4Admin.evtx | 68 KB | 2/10/2024 2:47 PM |
| Microsoft-Windows-ModernDeployment-Diagnostics-Provider%4Autopilot.evtx | 68 KB | 2/10/2024 2:47 PM |
| Microsoft-Windows-ModernDeployment-Diagnostics-Provider%4Diagnostics.evtx | 68 KB | 2/10/2024 2:47 PM |
| Microsoft-Windows-ModernDeployment-Diagnostics-Provider%4ManagementService.evtx | 68 KB | 2/10/2024 2:47 PM |
| Microsoft-Windows-MUI%4Admin.evtx | 68 KB | 2/10/2024 2:47 PM |
| Microsoft-Windows-MUI%4Operational.evtx | 68 KB | 9/29/2025 8:38 AM |
| Microsoft-Windows-NcdAutoSetup%4Operational.evtx | 68 KB | 3/29/2026 2:13 AM |
| Microsoft-Windows-NCSI%4Operational.evtx | 68 KB | 3/29/2026 2:13 AM |
| Microsoft-Windows-NetworkLocationWizard%4Operational.evtx | 68 KB | 9/29/2025 7:24 PM |
| Microsoft-Windows-NetworkProfile%4Operational.evtx | 1,028 KB | 3/29/2026 2:13 AM |
| Microsoft-Windows-Ntfs%4Operational.evtx | 22,596 KB | 4/10/2026 8:30 AM |
| Microsoft-Windows-Ntfs%4WHC.evtx | 68 KB | 3/29/2026 2:13 AM |
| Microsoft-Windows-Partition%4Diagnostic.evtx | 68 KB | 3/29/2026 2:13 AM |
| Microsoft-Windows-PowerShell%4Admin.evtx | 68 KB | 2/10/2024 2:47 PM |
| Microsoft-Windows-PowerShell%4Operational.evtx | 11,332 KB | 3/31/2026 3:50 AM |
| Microsoft-Windows-Privacy-Auditing%4Operational.evtx | 1,092 KB | 2/12/2026 5:57 AM |
| Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx | 68 KB | 2/11/2024 1:28 AM |
| Microsoft-Windows-Provisioning-Diagnostics-Provider%4Admin.evtx | 1,028 KB | 3/29/2026 10:48 AM |
| Microsoft-Windows-Provisioning-Diagnostics-Provider%4AutoPilot.evtx | 68 KB | 2/11/2024 1:28 AM |
| Microsoft-Windows-Provisioning-Diagnostics-Provider%4ManagementService.evtx | 68 KB | 2/11/2024 1:28 AM |
| Microsoft-Windows-PushNotification-Platform%4Admin.evtx | 68 KB | 2/10/2024 2:47 PM |
| Microsoft-Windows-PushNotification-Platform%4Operational.evtx | 1,028 KB | 4/8/2026 4:56 PM |
| Microsoft-Windows-ReadyBoost%4Operational.evtx | 1,028 KB | 4/8/2026 4:57 PM |
| Microsoft-Windows-RemoteAssistance%4Admin.evtx | 68 KB | 2/10/2024 2:47 PM |
| Microsoft-Windows-RemoteAssistance%4Operational.evtx | 68 KB | 9/29/2025 7:27 AM |
| Microsoft-Windows-RemoteDesktopServices-RdpCoreTS%4Admin.evtx | 1,028 KB | 4/10/2026 3:34 AM |
| Microsoft-Windows-RemoteDesktopServices-RdpCoreTS%4Operational.evtx | 1,028 KB | 4/10/2026 3:34 AM |
| Microsoft-Windows-RemoteDesktopServices-SessionServices%4Operational.evtx | 68 KB | 4/8/2026 4:58 AM |
| Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx | 68 KB | 3/29/2026 2:23 AM |
| Microsoft-Windows-Resource-Exhaustion-Resolver%4Operational.evtx | 68 KB | 3/27/2026 8:16 PM |
| Microsoft-Windows-RestartManager%4Operational.evtx | 68 KB | 2/10/2024 2:47 PM |
| Microsoft-Windows-Security-LessPrivilegedAppContainer%4Operational.evtx | 68 KB | 3/29/2026 10:47 AM |
| Microsoft-Windows-Security-Mitigations%4KernelMode.evtx | 1,028 KB | 3/29/2026 10:44 AM |
| Microsoft-Windows-Security-Mitigations%4UserMode.evtx | 68 KB | 2/11/2024 1:28 AM |
| Microsoft-Windows-Security-SPP-UX-GenuineCenter-Logging%4Operational.evtx | 68 KB | 10/17/2025 3:27 AM |
| Microsoft-Windows-Security-SPP-UX-Notifications%4ActionCenter.evtx | 68 KB | 2/12/2026 5:57 AM |
| Microsoft-Windows-SettingSync%4Debug.evtx | 1,028 KB | 3/31/2026 4:18 AM |
| Microsoft-Windows-SettingSync%4Operational.evtx | 68 KB | 2/10/2024 2:47 PM |
| Microsoft-Windows-Shell-ConnectedAccountState%4ActionCenter.evtx | 68 KB | 2/10/2024 2:47 PM |
| Microsoft-Windows-Shell-Core%4ActionCenter.evtx | 68 KB | 2/10/2024 2:47 PM |
| Microsoft-Windows-Shell-Core%4AppDefaults.evtx | 1,028 KB | 3/29/2026 10:44 AM |
| Microsoft-Windows-Shell-Core%4LogonTasksChannel.evtx | 68 KB | 2/10/2024 2:47 PM |
| Microsoft-Windows-Shell-Core%4Operational.evtx | 1,028 KB | 3/29/2026 2:09 PM |
| Microsoft-Windows-ShellCommon-StartLayoutPopulation%4Operational.evtx | 1,028 KB | 3/29/2026 10:44 AM |
| Microsoft-Windows-SmartCard-DeviceEnum%4Operational.evtx | 1,028 KB | 4/9/2026 6:54 PM |
| Microsoft-Windows-SmbClient%4Audit.evtx | 68 KB | 2/10/2024 2:47 PM |
| Microsoft-Windows-SmbClient%4Connectivity.evtx | 1,092 KB | 3/29/2026 11:52 AM |
| Microsoft-Windows-SMBClient%4Operational.evtx | 68 KB | 2/10/2024 2:47 PM |
| Microsoft-Windows-SmbClient%4Security.evtx | 68 KB | 3/29/2026 2:13 AM |
| Microsoft-Windows-SMBServer%4Audit.evtx | 68 KB | 2/11/2024 1:28 AM |
| Microsoft-Windows-SMBServer%4Connectivity.evtx | 68 KB | 2/11/2024 1:28 AM |
| Microsoft-Windows-SMBServer%4Operational.evtx | 68 KB | 3/29/2026 2:13 AM |
| Microsoft-Windows-SMBServer%4Security.evtx | 68 KB | 2/11/2024 1:28 AM |
| Microsoft-Windows-StateRepository%4Operational.evtx | 2,116 KB | 4/9/2026 7:37 PM |
| Microsoft-Windows-StateRepository%4Restricted.evtx | 68 KB | 2/11/2024 1:28 AM |
| Microsoft-Windows-Storage-ClassPnP%4Operational.evtx | 68 KB | 11/19/2024 9:55 AM |
| Microsoft-Windows-Storage-Storport%4Health.evtx | 68 KB | 2/11/2024 1:28 AM |
| Microsoft-Windows-Storage-Storport%4Operational.evtx | 6,212 KB | 4/10/2026 8:24 AM |
| Microsoft-Windows-StorageSpaces-Driver%4Diagnostic.evtx | 68 KB | 2/11/2024 1:28 AM |
| Microsoft-Windows-StorageSpaces-Driver%4Operational.evtx | 68 KB | 3/29/2026 2:13 AM |
| Microsoft-Windows-StorageSpaces-ManagementAgent%4WHC.evtx | 68 KB | 2/10/2024 2:47 PM |
| Microsoft-Windows-Store%4Operational.evtx | 19,588 KB | 4/8/2026 4:47 PM |
| Microsoft-Windows-Storsvc%4Diagnostic.evtx | 1,092 KB | 4/9/2026 10:18 PM |
| Microsoft-Windows-TaskScheduler%4Maintenance.evtx | 1,028 KB | 3/29/2026 8:21 AM |
| Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx | 68 KB | 2/11/2024 1:28 AM |
| Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx | 1,028 KB | 4/9/2026 6:58 PM |
| Microsoft-Windows-TerminalServices-PnPDevices%4Admin.evtx | 68 KB | 3/29/2026 10:44 AM |
| Microsoft-Windows-TerminalServices-PnPDevices%4Operational.evtx | 68 KB | 9/29/2025 8:38 AM |
| Microsoft-Windows-TerminalServices-RDPClient%4Operational.evtx | 68 KB | 9/29/2025 7:27 AM |
| Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx | 1,028 KB | 4/9/2026 7:12 AM |
| Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx | 1,028 KB | 4/10/2026 3:34 AM |
| Microsoft-Windows-TerminalServices-ServerUSBDevices%4Admin.evtx | 68 KB | 3/29/2026 10:44 AM |
| Microsoft-Windows-TerminalServices-ServerUSBDevices%4Operational.evtx | 68 KB | 9/29/2025 8:38 AM |
| Microsoft-Windows-Time-Service%4Operational.evtx | 1,028 KB | 3/29/2026 2:15 AM |
| Microsoft-Windows-TWinUI%4Operational.evtx | 68 KB | 3/27/2026 8:16 PM |
| Microsoft-Windows-TZSync%4Operational.evtx | 68 KB | 3/31/2026 4:13 AM |
| Microsoft-Windows-UAC-FileVirtualization%4Operational.evtx | 1,028 KB | 3/27/2026 8:16 PM |
| Microsoft-Windows-UniversalTelemetryClient%4Operational.evtx | 1,028 KB | 4/10/2026 8:19 AM |
| Microsoft-Windows-User Device Registration%4Admin.evtx | 68 KB | 3/29/2026 10:44 AM |
| Microsoft-Windows-User Profile Service%4Operational.evtx | 1,092 KB | 3/29/2026 10:44 AM |
| Microsoft-Windows-UserPnp%4ActionCenter.evtx | 68 KB | 2/11/2024 1:28 AM |
| Microsoft-Windows-UserPnp%4DeviceInstall.evtx | 68 KB | 10/2/2025 3:45 AM |
| Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx | 1,028 KB | 3/29/2026 2:13 AM |
| Microsoft-Windows-VPN%4Operational.evtx | 68 KB | 2/11/2024 1:28 AM |
| Microsoft-Windows-Wcmsvc%4Operational.evtx | 1,028 KB | 4/9/2026 6:58 PM |
| Microsoft-Windows-WebAuthN%4Operational.evtx | 1,092 KB | 3/29/2026 2:13 AM |
| Microsoft-Windows-WER-PayloadHealth%4Operational.evtx | 68 KB | 3/31/2026 6:45 AM |
| Microsoft-Windows-WFP%4Operational.evtx | 68 KB | 2/11/2024 1:28 AM |
| Microsoft-Windows-Windows Defender%4Operational.evtx | 11,332 KB | 4/10/2026 3:17 AM |
| Microsoft-Windows-Windows Defender%4WHC.evtx | 68 KB | 2/11/2024 1:28 AM |
| Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx | 68 KB | 2/11/2024 1:28 AM |
| Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx | 1,028 KB | 4/9/2026 7:07 AM |
| Microsoft-Windows-Windows Firewall With Advanced Security%4FirewallDiagnostics.evtx | 68 KB | 2/11/2024 1:28 AM |
| Microsoft-Windows-WindowsBackup%4ActionCenter.evtx | 68 KB | 2/10/2024 2:47 PM |
| Microsoft-Windows-WindowsSystemAssessmentTool%4Operational.evtx | 1,028 KB | 4/1/2026 4:13 AM |
| Microsoft-Windows-WindowsUpdateClient%4Operational.evtx | 1,028 KB | 4/9/2026 7:37 PM |
| Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx | 68 KB | 10/1/2025 10:01 AM |
| Microsoft-Windows-Winlogon%4Operational.evtx | 1,028 KB | 4/9/2026 6:58 PM |
| Microsoft-Windows-WinRM%4Operational.evtx | 1,028 KB | 4/10/2026 8:31 AM |
| Microsoft-Windows-WMI-Activity%4Operational.evtx | 1,028 KB | 4/10/2026 8:31 AM |
| Microsoft-Windows-WorkFolders%4WHC.evtx | 68 KB | 2/10/2024 2:47 PM |
| Security.evtx | 20,484 KB | 4/10/2026 8:31 AM |
| Setup.evtx | 68 KB | 9/29/2025 7:24 PM |
| System.evtx | 18,500 KB | 4/10/2026 8:09 AM |
| Windows PowerShell.evtx | 4,164 KB | 4/9/2026 3:33 AM |
