omerbenamram / evtx

A Fast (and safe) parser for the Windows XML Event Log (EVTX) format
Apache License 2.0
636 stars 61 forks source link

advice for reading live events #175

Closed mySYSMON closed 3 years ago

mySYSMON commented 3 years ago

Hi, I am new to rust and wonder if you have any examples for reading windows event logs on a live system. And of course thanks for making this fast library!

omerbenamram commented 3 years ago

You can use standard windows tooling for this https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.diagnostics/get-winevent?view=powershell-7.1.