windows event logs
2 views
Skip to first unread message
alice
May 12, 2007, 11:58:46 AM5/12/07
to Forensic Ideas
I am looking for tools and processes that would allow modification and
replacement windows event logs.
Any one know of a tool that will allow online (while evt files are
open/locked) editing of .evt files?
Any way to find the date/time that the .evt files were replaced?
Ideas or opinions on what would the process be to modify and replace
windows event log files?
thanks
replacement windows event logs.
Any one know of a tool that will allow online (while evt files are
open/locked) editing of .evt files?
Any way to find the date/time that the .evt files were replaced?
Ideas or opinions on what would the process be to modify and replace
windows event log files?
thanks
Reply all
Reply to author
Forward
0 new messages