windows event log manipulation detector

drop evtx files · detect gaps in record ids · selective deletion · log clearing · anomalous event counts · runs locally