Windows Event Log

From Just Solve the File Format Problem
(Difference between revisions)
Jump to: navigation, search
(Vista, Windows 2008, and Windows 7)
(Category:Windows)
(2 intermediate revisions by one user not shown)
Line 10: Line 10:
 
These systems use the .evt extension and are usually found in the  C:\Windows\system32\config directory.
 
These systems use the .evt extension and are usually found in the  C:\Windows\system32\config directory.
  
* [http://www.forensicswiki.org/wiki/Windows_Event_Log_%28EVT%29|Forensics Wiki: Windows Event Log (EVT)]
+
* [http://www.forensicswiki.org/wiki/Windows_Event_Log_%28EVT%29 Forensics Wiki: Windows Event Log (EVT)]
 
* [http://support.microsoft.com/kb/308427 How to view and manage event logs in Event Viewer in Windows XP]
 
* [http://support.microsoft.com/kb/308427 How to view and manage event logs in Event Viewer in Windows XP]
  
 
== Vista, Windows 2008, and Windows 7 ==
 
== Vista, Windows 2008, and Windows 7 ==
  
These files are also usually in the C:\Windows\system32\config directory, but have .log, .log1, and .log2 extensions... or no extension at all.
+
These files are also usually in the C:\Windows\system32\config directory, but have .log, .log1, and .log2 extensions... or no extension at all. Attempting to open them in a general file-viewer program seems to hang Windows Explorer.
  
 
* [http://www.forensicswiki.org/wiki/Windows_XML_Event_Log_%28EVTX%29 Forensics Wiki: Windows XML Event Log (EVTX)]
 
* [http://www.forensicswiki.org/wiki/Windows_XML_Event_Log_%28EVTX%29 Forensics Wiki: Windows XML Event Log (EVTX)]
Line 23: Line 23:
 
== Links ==
 
== Links ==
 
* [[Wikipedia:Event Viewer|Wikipedia: Event Viewer]]
 
* [[Wikipedia:Event Viewer|Wikipedia: Event Viewer]]
 +
 +
[[Category:Microsoft]]
 +
[[Category:Windows]]

Revision as of 20:54, 29 March 2017

File Format
Name Windows Event Log
Ontology
Extension(s) .evt, .log, .log1, .log2

The Windows Event Log tracks things that happen to Windows systems for diagnostic use. Its format, and the built-in Windows utilities to access it, has varied between Windows versions. Generally there are three different logs, Application, System, and Security.

Windows 2000, XP and 2003

These systems use the .evt extension and are usually found in the C:\Windows\system32\config directory.

Vista, Windows 2008, and Windows 7

These files are also usually in the C:\Windows\system32\config directory, but have .log, .log1, and .log2 extensions... or no extension at all. Attempting to open them in a general file-viewer program seems to hang Windows Explorer.

Links

Personal tools
Namespaces

Variants
Actions
Navigation
Toolbox