| parent folder | - | - |
| - | Application.evtx | 20975616 | 2026-08-19 06:36:50 |
| - | HardwareEvents.evtx | 69632 | 2025-06-11 10:36:24 |
| - | Intel Graphics Software.evtx | 1052672 | 2026-08-19 01:09:06 |
| - | Intel-GFX-Info%4Application.evtx | 69632 | 2025-06-11 10:36:24 |
| - | Intel-GFX-Info%4System.evtx | 69632 | 2025-06-11 10:36:24 |
| - | Internet Explorer.evtx | 69632 | 2025-06-11 10:36:24 |
| - | Key Management Service.evtx | 69632 | 2025-06-11 10:36:24 |
| - | Microsoft-Client-Licensing-Platform%4Admin.evtx | 1052672 | 2026-08-19 06:05:03 |
| - | Microsoft-Windows-AAD%4Operational.evtx | 69632 | 2025-06-11 10:47:09 |
| - | Microsoft-Windows-AI-ModelContextProtocol%4Admin.evtx | 69632 | 2026-06-10 04:18:18 |
| - | Microsoft-Windows-AI-ModelContextProtocol%4Operational.evtx | 69632 | 2026-06-10 04:18:18 |
| - | Microsoft-Windows-AI-Platform%4Admin.evtx | 69632 | 2026-06-10 04:18:18 |
| - | Microsoft-Windows-AI-Platform%4Operational.evtx | 69632 | 2026-06-10 04:18:18 |
| - | Microsoft-Windows-AgentConnector-FileSearch%4Admin.evtx | 69632 | 2026-07-15 02:51:25 |
| - | Microsoft-Windows-AgentConnector-FileSearch%4Operational.evtx | 69632 | 2026-07-15 02:51:25 |
| - | Microsoft-Windows-AgentConnector-FileTasks%4Admin.evtx | 69632 | 2026-07-15 02:51:25 |
| - | Microsoft-Windows-AgentConnector-FileTasks%4Operational.evtx | 69632 | 2026-07-15 02:51:25 |
| - | Microsoft-Windows-AgentConnector-FilesAgent%4Admin.evtx | 69632 | 2026-08-12 04:40:11 |
| - | Microsoft-Windows-AgentConnector-FilesAgent%4Operational.evtx | 69632 | 2026-08-12 04:40:11 |
| - | Microsoft-Windows-AgentConnector-Settings%4Admin.evtx | 69632 | 2026-07-15 02:51:25 |
| - | Microsoft-Windows-AgentConnector-Settings%4Operational.evtx | 69632 | 2026-07-15 02:51:25 |
| - | Microsoft-Windows-AppModel-Runtime%4Admin.evtx | 1052672 | 2026-08-19 06:04:41 |
| - | Microsoft-Windows-AppReadiness%4Admin.evtx | 1118208 | 2026-08-15 18:07:17 |
| - | Microsoft-Windows-AppReadiness%4Operational.evtx | 1118208 | 2026-08-15 18:07:17 |
| - | Microsoft-Windows-AppXDeployment%4Operational.evtx | 1052672 | 2026-08-19 06:00:33 |
| - | Microsoft-Windows-AppXDeployment-Server%4Operational.evtx | 1118208 | 2026-08-15 17:01:10 |
| - | Microsoft-Windows-AppXDeploymentServer%4Operational.evtx | 5246976 | 2026-08-19 06:54:33 |
| - | Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx | 1052672 | 2026-08-19 06:00:33 |
| - | Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx | 1052672 | 2026-08-16 18:19:57 |
| - | Microsoft-Windows-Application-Experience%4Program-Compatibility-Troubleshooter.evtx | 69632 | 2025-06-12 00:30:21 |
| - | Microsoft-Windows-Application-Experience%4Program-Inventory.evtx | 69632 | 2025-06-12 00:30:21 |
| - | Microsoft-Windows-Application-Experience%4Program-Telemetry.evtx | 1052672 | 2026-08-19 05:58:21 |
| - | Microsoft-Windows-Application-Experience%4Steps-Recorder.evtx | 69632 | 2025-06-12 00:30:21 |
| - | Microsoft-Windows-AppxPackaging%4Operational.evtx | 1052672 | 2026-08-19 06:54:33 |
| - | Microsoft-Windows-Audio%4CaptureMonitor.evtx | 69632 | 2025-06-11 10:36:24 |
| - | Microsoft-Windows-Audio%4Operational.evtx | 1052672 | 2026-08-19 03:12:02 |
| - | Microsoft-Windows-Audio%4PlaybackManager.evtx | 1052672 | 2026-08-18 02:17:44 |
| - | Microsoft-Windows-Authentication User Interface%4Operational.evtx | 69632 | 2026-08-12 04:43:13 |
| - | Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx | 69632 | 2026-08-12 04:38:07 |
| - | Microsoft-Windows-Biometrics%4Operational.evtx | 1052672 | 2026-08-18 07:52:46 |
| - | Microsoft-Windows-BitLocker%4BitLocker Management.evtx | 1052672 | 2026-08-18 07:52:46 |
| - | Microsoft-Windows-Bits-Client%4Operational.evtx | 1052672 | 2026-08-19 05:59:21 |
| - | Microsoft-Windows-CloudFiles-Filter%4Operational.evtx | 69632 | 2026-08-15 17:54:47 |
| - | Microsoft-Windows-CloudRestoreLauncher%4Operational.evtx | 1052672 | 2026-08-18 17:05:20 |
| - | Microsoft-Windows-CloudStore%4Initialization.evtx | 69632 | 2025-06-12 00:30:21 |
| - | Microsoft-Windows-CloudStore%4Operational.evtx | 1052672 | 2026-08-15 17:01:10 |
| - | Microsoft-Windows-CodeIntegrity%4Operational.evtx | 1052672 | 2026-08-15 17:54:47 |
| - | Microsoft-Windows-Containers-BindFlt%4Operational.evtx | 69632 | 2026-08-15 17:54:47 |
| - | Microsoft-Windows-Containers-Wcifs%4Operational.evtx | 69632 | 2026-08-15 17:54:47 |
| - | Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx | 69632 | 2025-06-14 22:45:48 |
| - | Microsoft-Windows-Crypto-DPAPI%4Operational.evtx | 1052672 | 2026-08-18 01:57:44 |
| - | Microsoft-Windows-Crypto-NCrypt%4CertInUse.evtx | 69632 | 2025-06-12 00:30:21 |
| - | Microsoft-Windows-Crypto-NCrypt%4KeyMgmt.evtx | 1052672 | 2026-08-19 05:58:21 |
| - | Microsoft-Windows-Crypto-NCrypt%4Operational.evtx | 1052672 | 2026-08-19 05:58:21 |
| - | Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx | 1052672 | 2026-08-15 18:04:47 |
| - | Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Autopilot.evtx | 69632 | 2025-06-12 00:30:21 |
| - | Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Enrollment.evtx | 69632 | 2025-06-12 00:30:21 |
| - | Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Operational.evtx | 1052672 | 2026-08-15 23:42:20 |
| - | Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Sync.evtx | 69632 | 2025-06-12 00:30:21 |
| - | Microsoft-Windows-DeviceSetupManager%4Admin.evtx | 1052672 | 2026-08-15 23:04:49 |
| - | Microsoft-Windows-DeviceSetupManager%4Operational.evtx | 69632 | 2026-08-15 23:02:19 |
| - | Microsoft-Windows-Dhcp-Client%4Admin.evtx | 69632 | 2025-06-11 10:36:24 |
| - | Microsoft-Windows-Dhcpv6-Client%4Admin.evtx | 69632 | 2026-08-12 04:43:13 |
| - | Microsoft-Windows-Diagnosis-DPS%4Operational.evtx | 1052672 | 2026-08-18 19:18:08 |
| - | Microsoft-Windows-Diagnosis-PCW%4Operational.evtx | 1052672 | 2026-08-19 06:49:07 |
| - | Microsoft-Windows-Diagnosis-Scheduled%4Operational.evtx | 1052672 | 2026-08-15 10:56:08 |
| - | Microsoft-Windows-Diagnosis-Scripted%4Admin.evtx | 69632 | 2026-08-15 10:53:38 |
| - | Microsoft-Windows-Diagnosis-Scripted%4Operational.evtx | 1052672 | 2026-08-15 10:56:08 |
| - | Microsoft-Windows-Diagnostics-Performance%4Operational.evtx | 1052672 | 2026-08-15 18:07:17 |
| - | Microsoft-Windows-DiskDiagnosticDataCollector%4Operational.evtx | 69632 | 2025-07-06 18:16:06 |
| - | Microsoft-Windows-DriverProxy%4Operational.evtx | 69632 | 2025-12-10 18:17:08 |
| - | Microsoft-Windows-DxgKrnl-Admin.evtx | 69632 | 2026-08-15 18:00:29 |
| - | Microsoft-Windows-DxgKrnl-Operational.evtx | 69632 | 2026-08-15 18:49:47 |
| - | Microsoft-Windows-EnhancedStorage-EhStorClass%4Operational.evtx | 69632 | 2026-08-15 17:54:47 |
| - | Microsoft-Windows-FileHistory-Core%4WHC.evtx | 69632 | 2025-06-12 00:30:21 |
| - | Microsoft-Windows-FilesAgentConnector%4Admin.evtx | 69632 | 2026-06-10 04:18:18 |
| - | Microsoft-Windows-FilesAgentConnector%4Operational.evtx | 69632 | 2026-06-10 04:18:18 |
| - | Microsoft-Windows-GroupPolicy%4Operational.evtx | 4198400 | 2026-08-19 06:43:23 |
| - | Microsoft-Windows-HelloForBusiness%4Operational.evtx | 1052672 | 2026-08-18 07:52:46 |
| - | Microsoft-Windows-Host-Network-Service-Admin.evtx | 69632 | 2026-08-15 18:49:47 |
| - | Microsoft-Windows-Host-Network-Service-Operational.evtx | 1052672 | 2026-08-15 18:49:47 |
| - | Microsoft-Windows-HostGuardianClient-Service%4Admin.evtx | 69632 | 2026-08-15 17:52:27 |
| - | Microsoft-Windows-HostGuardianClient-Service%4Operational.evtx | 69632 | 2026-08-15 17:52:27 |
| - | Microsoft-Windows-HostGuardianService-CA%4Admin.evtx | 69632 | 2026-08-15 17:52:27 |
| - | Microsoft-Windows-HostGuardianService-CA%4Operational.evtx | 69632 | 2026-08-15 17:52:27 |
| - | Microsoft-Windows-HostGuardianService-Client%4Admin.evtx | 69632 | 2026-08-15 17:52:27 |
| - | Microsoft-Windows-HostGuardianService-Client%4Operational.evtx | 69632 | 2026-08-15 17:52:27 |
| - | Microsoft-Windows-HotspotAuth%4Operational.evtx | 69632 | 2025-06-12 00:30:21 |
| - | Microsoft-Windows-Hyper-V-Compute-Admin.evtx | 69632 | 2026-08-15 17:54:47 |
| - | Microsoft-Windows-Hyper-V-Compute-Operational.evtx | 1118208 | 2026-08-15 18:49:47 |
| - | Microsoft-Windows-Hyper-V-Config-Admin.evtx | 69632 | 2026-08-15 17:52:27 |
| - | Microsoft-Windows-Hyper-V-Config-Operational.evtx | 69632 | 2026-08-15 17:52:27 |
| - | Microsoft-Windows-Hyper-V-Hierarchical-NIC-Switch%4Operational.evtx | 69632 | 2026-08-15 17:52:27 |
| - | Microsoft-Windows-Hyper-V-Hypervisor-Admin.evtx | 69632 | 2026-08-15 17:54:47 |
| - | Microsoft-Windows-Hyper-V-Hypervisor-Operational.evtx | 69632 | 2026-08-15 18:49:47 |
| - | Microsoft-Windows-Hyper-V-StorageVSP-Admin.evtx | 69632 | 2026-08-15 23:59:50 |
| - | Microsoft-Windows-Hyper-V-VMMS-Admin.evtx | 69632 | 2026-08-15 17:54:47 |
| - | Microsoft-Windows-Hyper-V-VMMS-Networking.evtx | 69632 | 2026-08-15 17:52:27 |
| - | Microsoft-Windows-Hyper-V-VMMS-Operational.evtx | 69632 | 2026-08-15 17:54:47 |
| - | Microsoft-Windows-Hyper-V-VMMS-Storage.evtx | 69632 | 2026-08-15 17:52:27 |
| - | Microsoft-Windows-Hyper-V-VmSwitch-Operational.evtx | 23138304 | 2026-08-19 06:29:38 |
| - | Microsoft-Windows-Hyper-V-Worker-Admin.evtx | 69632 | 2026-08-15 18:49:47 |
| - | Microsoft-Windows-Hyper-V-Worker-Operational.evtx | 69632 | 2026-08-15 17:52:28 |
| - | Microsoft-Windows-IKE%4Operational.evtx | 69632 | 2025-07-06 18:16:06 |
| - | Microsoft-Windows-Kernel-ApphelpCache%4Operational.evtx | 69632 | 2025-12-10 18:17:08 |
| - | Microsoft-Windows-Kernel-Boot%4Operational.evtx | 69632 | 2026-08-15 17:54:46 |
| - | Microsoft-Windows-Kernel-CPU-Starvation%4Operational.evtx | 69632 | 2025-12-10 18:17:08 |
| - | Microsoft-Windows-Kernel-Cache%4Operational.evtx | 1052672 | 2026-08-19 06:11:30 |
| - | Microsoft-Windows-Kernel-Dump%4Operational.evtx | 69632 | 2026-08-15 17:54:47 |
| - | Microsoft-Windows-Kernel-EventTracing%4Admin.evtx | 1052672 | 2026-08-18 16:42:50 |
| - | Microsoft-Windows-Kernel-IO%4Operational.evtx | 69632 | 2025-12-10 18:17:08 |
| - | Microsoft-Windows-Kernel-LiveDump%4Operational.evtx | 69632 | 2025-07-06 19:57:49 |
| - | Microsoft-Windows-Kernel-PRM%4Operational.evtx | 69632 | 2025-12-10 18:17:08 |
| - | Microsoft-Windows-Kernel-PnP%4Configuration.evtx | 1052672 | 2026-08-15 23:02:19 |
| - | Microsoft-Windows-Kernel-PnP%4Device Management.evtx | 4263936 | 2026-08-19 03:12:13 |
| - | Microsoft-Windows-Kernel-PnP%4Driver Watchdog.evtx | 69632 | 2026-08-15 17:54:46 |
| - | Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx | 69632 | 2025-06-11 10:36:24 |
| - | Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx | 1052672 | 2026-08-15 17:54:47 |
| - | Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx | 69632 | 2025-06-12 00:30:21 |
| - | Microsoft-Windows-Kernel-WDI%4Operational.evtx | 69632 | 2025-12-10 18:17:08 |
| - | Microsoft-Windows-Kernel-WHEA%4Errors.evtx | 69632 | 2025-06-11 10:36:24 |
| - | Microsoft-Windows-Kernel-WHEA%4Operational.evtx | 1118208 | 2026-08-15 17:54:47 |
| - | Microsoft-Windows-KernelStreaming%4Operational.evtx | 69632 | 2025-06-14 22:45:48 |
| - | Microsoft-Windows-Known Folders API Service.evtx | 1052672 | 2026-08-19 06:04:11 |
| - | Microsoft-Windows-LanguagePackSetup%4Operational.evtx | 1052672 | 2026-08-17 11:57:38 |
| - | Microsoft-Windows-LiveId%4Operational.evtx | 1052672 | 2026-08-19 06:02:20 |
| - | Microsoft-Windows-LocationServiceProvider%4Operational.evtx | 69632 | 2025-09-10 05:32:25 |
| - | Microsoft-Windows-MF-FrameServer%4Camera_DeviceMFT.evtx | 69632 | 2025-06-14 22:45:48 |
| - | Microsoft-Windows-MF-FrameServer%4Camera_FrameServer.evtx | 69632 | 2026-08-15 17:54:47 |
| - | Microsoft-Windows-MF-MediaFoundation%4MF_DeviceProxy.evtx | 69632 | 2025-06-14 22:45:48 |
| - | Microsoft-Windows-MPTF%4MPTF-Operational.evtx | 69632 | 2025-08-13 04:20:39 |
| - | Microsoft-Windows-MUI%4Admin.evtx | 69632 | 2025-06-12 00:30:21 |
| - | Microsoft-Windows-MUI%4Operational.evtx | 69632 | 2026-07-18 10:54:09 |
| - | Microsoft-Windows-NCSI%4Operational.evtx | 69632 | 2026-08-15 18:07:17 |
| - | Microsoft-Windows-NcdAutoSetup%4Operational.evtx | 69632 | 2025-06-11 10:39:39 |
| - | Microsoft-Windows-NetworkProfile%4Operational.evtx | 1052672 | 2026-08-18 17:42:50 |
| - | Microsoft-Windows-NlaSvc%4Operational.evtx | 69632 | 2025-07-06 18:20:18 |
| - | Microsoft-Windows-Ntfs%4Operational.evtx | 33558528 | 2026-08-19 06:55:36 |
| - | Microsoft-Windows-Ntfs%4WHC.evtx | 69632 | 2026-08-15 17:54:47 |
| - | Microsoft-Windows-PCI%4Operational.evtx | 1052672 | 2026-08-18 12:02:48 |
| - | Microsoft-Windows-PCRPF%4PCRPF.evtx | 1052672 | 2026-08-18 07:52:46 |
| - | Microsoft-Windows-Partition%4Diagnostic.evtx | 1118208 | 2026-08-15 17:54:47 |
| - | Microsoft-Windows-Perflib%4Operational.evtx | 1052672 | 2026-08-15 18:02:17 |
| - | Microsoft-Windows-PowerShell%4Admin.evtx | 69632 | 2025-06-12 00:30:21 |
| - | Microsoft-Windows-PowerShell%4Operational.evtx | 6361088 | 2026-08-19 02:02:00 |
| - | Microsoft-Windows-PrintService%4Admin.evtx | 69632 | 2026-08-12 04:43:13 |
| - | Microsoft-Windows-Privacy-Auditing%4Operational.evtx | 1118208 | 2026-08-12 16:50:47 |
| - | Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx | 69632 | 2025-06-11 10:36:24 |
| - | Microsoft-Windows-Provisioning-Diagnostics-Provider%4AutoPilot.evtx | 69632 | 2025-06-12 00:30:21 |
| - | Microsoft-Windows-Provisioning-Diagnostics-Provider%4ManagementService.evtx | 69632 | 2025-06-12 00:30:21 |
| - | Microsoft-Windows-PushNotification-Platform%4Admin.evtx | 69632 | 2025-06-12 00:30:21 |
| - | Microsoft-Windows-PushNotification-Platform%4Operational.evtx | 1052672 | 2026-08-19 06:32:10 |
| - | Microsoft-Windows-Rdp-Graphics-RdpAvenc%4Admin.evtx | 69632 | 2025-11-12 05:32:38 |
| - | Microsoft-Windows-Rdp-Graphics-RdpAvenc%4Operational.evtx | 69632 | 2025-11-12 05:32:38 |
| - | Microsoft-Windows-Rdp-Graphics-RdpLite%4Admin.evtx | 69632 | 2025-11-12 05:32:38 |
| - | Microsoft-Windows-Rdp-Graphics-RdpLite%4Operational.evtx | 69632 | 2025-11-12 05:32:38 |
| - | Microsoft-Windows-ReadyBoost%4Operational.evtx | 69632 | 2025-06-12 00:33:37 |
| - | Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx | 1052672 | 2026-08-15 18:54:48 |
| - | Microsoft-Windows-Resource-Exhaustion-Resolver%4Operational.evtx | 69632 | 2026-08-15 17:51:33 |
| - | Microsoft-Windows-RestartManager%4Operational.evtx | 69632 | 2025-07-09 04:30:57 |
| - | Microsoft-Windows-SMBClient%4Operational.evtx | 69632 | 2026-08-15 17:54:46 |
| - | Microsoft-Windows-SMBServer%4Audit.evtx | 69632 | 2025-06-11 10:36:24 |
| - | Microsoft-Windows-SMBServer%4Connectivity.evtx | 69632 | 2026-02-08 23:30:56 |
| - | Microsoft-Windows-SMBServer%4Operational.evtx | 4263936 | 2026-08-18 17:42:50 |
| - | Microsoft-Windows-SMBServer%4Security.evtx | 69632 | 2025-06-11 10:36:24 |
| - | Microsoft-Windows-SearchAgentConnector%4Admin.evtx | 69632 | 2026-06-10 04:18:18 |
| - | Microsoft-Windows-SearchAgentConnector%4Operational.evtx | 69632 | 2026-06-10 04:18:18 |
| - | Microsoft-Windows-Security-LessPrivilegedAppContainer%4Operational.evtx | 69632 | 2026-08-15 23:07:19 |
| - | Microsoft-Windows-Security-Mitigations%4KernelMode.evtx | 1052672 | 2026-08-15 23:07:19 |
| - | Microsoft-Windows-Security-Mitigations%4UserMode.evtx | 69632 | 2025-06-12 00:30:21 |
| - | Microsoft-Windows-Security-SPP-UX-Notifications%4ActionCenter.evtx | 69632 | 2025-06-11 10:49:40 |
| - | Microsoft-Windows-SettingsAgentConnector%4Admin.evtx | 69632 | 2026-06-10 04:18:18 |
| - | Microsoft-Windows-SettingsAgentConnector%4Operational.evtx | 69632 | 2026-06-10 04:18:18 |
| - | Microsoft-Windows-Shell-ConnectedAccountState%4ActionCenter.evtx | 69632 | 2025-06-12 00:30:21 |
| - | Microsoft-Windows-Shell-Core%4ActionCenter.evtx | 69632 | 2025-06-12 00:30:21 |
| - | Microsoft-Windows-Shell-Core%4AppDefaults.evtx | 1052672 | 2026-08-19 04:20:24 |
| - | Microsoft-Windows-Shell-Core%4LogonTasksChannel.evtx | 69632 | 2025-06-12 00:30:21 |
| - | Microsoft-Windows-Shell-Core%4Operational.evtx | 1052672 | 2026-08-17 12:07:38 |
| - | Microsoft-Windows-ShellCommon-StartLayoutPopulation%4Operational.evtx | 1052672 | 2026-08-15 23:04:49 |
| - | Microsoft-Windows-SmbClient%4Audit.evtx | 69632 | 2025-06-12 00:30:21 |
| - | Microsoft-Windows-SmbClient%4Connectivity.evtx | 2166784 | 2026-08-18 17:42:50 |
| - | Microsoft-Windows-SmbClient%4Security.evtx | 69632 | 2025-06-14 22:45:48 |
| - | Microsoft-Windows-StateRepository%4Operational.evtx | 5246976 | 2026-08-19 06:54:33 |
| - | Microsoft-Windows-StateRepository%4Restricted.evtx | 69632 | 2025-06-11 10:36:24 |
| - | Microsoft-Windows-Storage-ClassPnP%4Operational.evtx | 69632 | 2026-01-23 19:23:28 |
| - | Microsoft-Windows-Storage-Storport%4Health.evtx | 6295552 | 2026-08-19 06:08:31 |
| - | Microsoft-Windows-Storage-Storport%4Operational.evtx | 33558528 | 2026-08-19 06:33:17 |
| - | Microsoft-Windows-StorageManagement%4Operational.evtx | 1118208 | 2026-08-15 04:11:06 |
| - | Microsoft-Windows-StorageSpaces-Api%4Operational.evtx | 69632 | 2025-08-13 04:20:39 |
| - | Microsoft-Windows-StorageSpaces-Driver%4Diagnostic.evtx | 69632 | 2025-06-11 10:36:24 |
| - | Microsoft-Windows-StorageSpaces-Driver%4Operational.evtx | 1052672 | 2026-08-15 17:54:47 |
| - | Microsoft-Windows-StorageSpaces-ManagementAgent%4WHC.evtx | 69632 | 2025-06-12 00:30:21 |
| - | Microsoft-Windows-StorageVolume%4Diagnostic.evtx | 69632 | 2025-06-11 10:36:24 |
| - | Microsoft-Windows-StorageVolume%4Operational.evtx | 1052672 | 2026-08-15 17:54:47 |
| - | Microsoft-Windows-Store%4Operational.evtx | 20058112 | 2026-08-19 06:04:10 |
| - | Microsoft-Windows-Storsvc%4Diagnostic.evtx | 1118208 | 2026-08-18 18:55:30 |
| - | Microsoft-Windows-TWinUI%4Operational.evtx | 69632 | 2026-08-15 17:51:33 |
| - | Microsoft-Windows-TZSync%4Operational.evtx | 69632 | 2026-08-14 10:46:03 |
| - | Microsoft-Windows-TaskScheduler%4Maintenance.evtx | 1052672 | 2026-08-19 05:53:26 |
| - | Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx | 69632 | 2025-06-11 10:36:24 |
| - | Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx | 1052672 | 2026-08-15 18:04:47 |
| - | Microsoft-Windows-TerminalServices-RDPClient%4Operational.evtx | 69632 | 2026-08-15 18:49:47 |
| - | Microsoft-Windows-Time-Service%4Operational.evtx | 1052672 | 2026-08-18 20:59:34 |
| - | Microsoft-Windows-UAC%4Operational.evtx | 69632 | 2025-12-10 18:17:08 |
| - | Microsoft-Windows-UAC-FileVirtualization%4Operational.evtx | 69632 | 2025-06-11 10:36:24 |
| - | Microsoft-Windows-UniversalTelemetryClient%4Operational.evtx | 1052672 | 2026-08-19 06:53:41 |
| - | Microsoft-Windows-User Device Registration%4Admin.evtx | 69632 | 2026-08-15 18:04:47 |
| - | Microsoft-Windows-User Profile Service%4Operational.evtx | 1118208 | 2026-08-15 18:04:47 |
| - | Microsoft-Windows-User-Loader%4Operational.evtx | 69632 | 2025-12-10 18:17:08 |
| - | Microsoft-Windows-UserPnp%4ActionCenter.evtx | 69632 | 2025-06-11 10:36:24 |
| - | Microsoft-Windows-UserPnp%4DeviceInstall.evtx | 69632 | 2026-08-15 23:04:49 |
| - | Microsoft-Windows-VDRVROOT%4Operational.evtx | 69632 | 2026-08-15 18:00:29 |
| - | Microsoft-Windows-VHDMP-Operational.evtx | 1052672 | 2026-08-19 06:07:41 |
| - | Microsoft-Windows-VPN%4Operational.evtx | 69632 | 2025-07-06 18:16:06 |
| - | Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx | 1052672 | 2026-08-19 04:20:44 |
| - | Microsoft-Windows-WER-PayloadHealth%4Operational.evtx | 1052672 | 2026-08-19 04:20:56 |
| - | Microsoft-Windows-WFP%4Operational.evtx | 69632 | 2026-08-15 17:54:47 |
| - | Microsoft-Windows-WLAN-AutoConfig%4Operational.evtx | 69632 | 2025-06-11 10:36:24 |
| - | Microsoft-Windows-WMI-Activity%4Operational.evtx | 1052672 | 2026-08-18 21:27:47 |
| - | Microsoft-Windows-WPD-ClassInstaller%4Operational.evtx | 69632 | 2025-06-11 10:36:24 |
| - | Microsoft-Windows-WWAN-SVC-Events%4Operational.evtx | 69632 | 2025-11-12 05:30:40 |
| - | Microsoft-Windows-Wcmsvc%4Operational.evtx | 1052672 | 2026-08-15 18:04:47 |
| - | Microsoft-Windows-WebAuthN%4Operational.evtx | 1118208 | 2026-08-16 18:19:57 |
| - | Microsoft-Windows-WerKernel%4Operational.evtx | 69632 | 2026-07-21 16:53:41 |
| - | Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx | 69632 | 2025-06-11 10:47:09 |
| - | Microsoft-Windows-WinRM%4Operational.evtx | 1052672 | 2026-08-19 05:59:21 |
| - | Microsoft-Windows-Windows Defender%4Operational.evtx | 16781312 | 2026-08-19 06:53:40 |
| - | Microsoft-Windows-Windows Defender%4WHC.evtx | 69632 | 2025-06-11 10:39:59 |
| - | Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx | 69632 | 2025-06-11 10:36:24 |
| - | Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx | 1052672 | 2026-08-19 04:20:59 |
| - | Microsoft-Windows-Windows Firewall With Advanced Security%4FirewallDiagnostics.evtx | 69632 | 2025-06-11 10:36:24 |
| - | Microsoft-Windows-WindowsBackup%4ActionCenter.evtx | 69632 | 2025-06-12 00:30:21 |
| - | Microsoft-Windows-WindowsSystemAssessmentTool%4Operational.evtx | 1052672 | 2026-08-05 11:26:56 |
| - | Microsoft-Windows-WindowsUpdateClient%4Operational.evtx | 1052672 | 2026-08-19 04:20:29 |
| - | Microsoft-Windows-Winlogon%4Operational.evtx | 1052672 | 2026-08-15 18:04:47 |
| - | Microsoft-Windows-WorkFolders%4WHC.evtx | 69632 | 2025-06-12 00:30:21 |
| - | Microsoft-WindowsPhone-Connectivity-WiFiConnSvc-Channel.evtx | 69632 | 2025-06-11 10:36:24 |
| - | OneApp_IGCC.evtx | 69632 | 2025-06-11 10:36:24 |
| - | Plugin-Passkey-Providers%4Operational.evtx | 69632 | 2025-06-14 22:45:48 |
| - | Security.evtx | 20975616 | 2026-08-19 06:54:33 |
| - | Setup.evtx | 1052672 | 2026-08-15 17:54:47 |
| - | Synced-Passkey-Provider%4Operatonal.evtx | 69632 | 2025-06-14 22:45:48 |
| - | System.evtx | 16846848 | 2026-08-19 06:01:12 |
| - | Windows PowerShell.evtx | 12652544 | 2026-08-19 02:02:00 |
| - | microsoft-windows-provisioning-diagnostics-provider%4admin.evtx | 1052672 | 2026-08-15 23:39:50 |