drop evtx files · detect gaps in record ids · selective deletion · log clearing · anomalous event counts · runs locally
drop one or more .evtx files