Need to security. The evtx automatic real-time synchronization to another text file, with a tail. Exe, but cannot open the tail evtx suffix file. Using the "attach task to this event," and then write a script wevtutil epl security c: \ 664. TXT but open TXT is gibberish, a great god have what good method?
In fact is to develop a program analysis system security log, export also, there are other way?

CodePudding user response:

Search "psloglist"