drop evtx csvs and system registry exports · detect disabled event log channels · reduced log maximum sizes · custom channel configurations · identify logging gaps caused by deliberate channel manipulation · runs locally
inputs
drop evtx csv + registry (multi-file)
or click
drop evtx csv and system/software .reg exports