search

sans-blue-team / DeepBlueCLI

GNU General Public License v3.0
2.16k stars 352 forks source link

Fixed windows event log check. #27

Closed TheNiv closed 1 year ago

TheNiv commented 2 years ago

The output of the start/stop windows event log service was not correct. After checking the script on the sample file: disablestop-eventlog.evtx I have noticed that the output was not correct and found out it is actually the third parameter that should be checked instead of the second.

TheNiv commented 2 years ago

The output on the file: disablestop-eventlog.evtx before the change: image

The output on the file: disablestop-eventlog.evtx after the change: image