📂 当前目录:C:\Windows\System32\winevt\Logs

⬆ 返回上级目录

📁 目录内容

名称 创建时间 修改时间 操作
Microsoft-Windows-RemoteDesktopServices-RdpCoreTS%4Operational.evtx 2023-12-25 17:40:00 2025-06-07 17:01:09
Microsoft-WindowsAzure-Diagnostics%4GuestAgent.evtx 2023-12-25 17:32:08 2025-06-07 17:01:06
Microsoft-WindowsAzure-Diagnostics%4Heartbeat.evtx 2023-12-25 17:32:12 2025-06-07 17:01:05
Microsoft-Windows-SystemDataArchiver%4Diagnostic.evtx 2023-12-25 17:34:10 2025-06-07 17:00:59
Security.evtx 2023-12-25 17:32:04 2025-06-07 17:00:49
Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx 2023-12-25 17:40:00 2025-06-07 17:00:48
Microsoft-WindowsAzure-Status%4GuestAgent.evtx 2023-12-25 17:32:12 2025-06-07 17:00:45
Microsoft-Windows-Kernel-IO%4Operational.evtx 2023-12-25 17:32:08 2025-06-07 17:00:31
Microsoft-Windows-UniversalTelemetryClient%4Operational.evtx 2023-12-25 17:32:09 2025-06-07 16:58:50
Microsoft-Windows-ServerManager-MultiMachine%4Operational.evtx 2023-12-25 20:07:53 2025-06-07 16:58:50
System.evtx 2023-12-25 17:32:04 2025-06-07 16:54:51
Microsoft-Windows-WMI-Activity%4Operational.evtx 2023-12-25 17:32:08 2025-06-07 16:54:50
Microsoft-Windows-Storsvc%4Diagnostic.evtx 2023-12-25 18:33:35 2025-06-07 16:53:50
Microsoft-Windows-Ntfs%4Operational.evtx 2023-12-25 17:32:07 2025-06-07 16:53:50
Microsoft-Windows-Time-Service%4Operational.evtx 2023-12-25 17:32:08 2025-06-07 16:48:50
Microsoft-Windows-PowerShell%4Operational.evtx 2023-12-25 17:33:02 2025-06-07 16:33:50
Microsoft-Windows-Security-LessPrivilegedAppContainer%4Operational.evtx 2024-11-12 11:12:29 2025-06-07 16:33:50
Application.evtx 2023-12-25 17:32:04 2025-06-07 16:33:50
Windows PowerShell.evtx 2023-12-25 17:32:05 2025-06-07 16:33:50
Operations Manager.evtx 2023-12-25 17:32:05 2025-06-07 16:33:50
Microsoft-Windows-Windows Defender%4Operational.evtx 2023-12-25 17:34:21 2025-06-07 16:28:50
Microsoft-Windows-WindowsUpdateClient%4Operational.evtx 2023-12-25 17:32:55 2025-06-07 16:28:50
Microsoft-Windows-LiveId%4Operational.evtx 2023-12-25 17:34:07 2025-06-07 16:28:50
Microsoft-Windows-Shell-Core%4AppDefaults.evtx 2023-12-25 17:34:57 2025-06-07 16:28:50
Microsoft-Windows-Kernel-Cache%4Operational.evtx 2023-12-25 17:32:09 2025-06-07 16:13:50
Microsoft-Windows-Bits-Client%4Operational.evtx 2023-12-25 17:33:05 2025-06-07 15:33:32
Microsoft-Windows-WinRM%4Operational.evtx 2023-12-25 17:32:08 2025-06-07 15:33:32
Microsoft-Windows-StateRepository%4Operational.evtx 2023-12-25 17:32:09 2025-06-07 15:08:32
Microsoft-Windows-TaskScheduler%4Maintenance.evtx 2023-12-25 17:34:28 2025-06-07 13:55:10
Microsoft-Windows-ServerManager-DeploymentProvider%4Operational.evtx 2023-12-25 17:40:01 2025-06-07 04:42:33
Microsoft-Windows-DataIntegrityScan%4Admin.evtx 2023-12-25 23:12:29 2025-06-06 23:33:01
Microsoft-Client-Licensing-Platform%4Admin.evtx 2023-12-25 17:32:07 2025-06-06 17:59:44
Microsoft-Windows-Store%4Operational.evtx 2023-12-25 17:32:08 2025-06-06 17:54:44
Microsoft-Windows-AppxPackaging%4Operational.evtx 2023-12-25 17:32:11 2025-06-06 17:54:44
Microsoft-Windows-Crypto-NCrypt%4Operational.evtx 2023-12-25 17:32:07 2025-06-06 17:32:39
Microsoft-Windows-Kernel-PnP%4Configuration.evtx 2023-12-25 17:32:06 2025-06-06 17:27:39
Microsoft-Windows-Kernel-PnP%4Device Management.evtx 2023-12-25 17:32:06 2025-06-06 17:27:39
Microsoft-Windows-Wcmsvc%4Operational.evtx 2023-12-25 17:32:08 2025-06-06 17:27:39
Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx 2023-12-25 17:32:05 2025-06-06 17:27:39
Microsoft-Windows-Winlogon%4Operational.evtx 2023-12-25 17:39:55 2025-06-06 17:27:39
Microsoft-Windows-PrintService%4Admin.evtx 2023-12-25 17:32:42 2025-06-06 17:22:39
Microsoft-Windows-DeviceSetupManager%4Admin.evtx 2023-12-25 17:32:09 2025-06-06 17:22:39
Microsoft-Windows-DeviceSetupManager%4Operational.evtx 2023-12-25 17:32:09 2025-06-06 17:22:39
Microsoft-Windows-PushNotification-Platform%4Operational.evtx 2023-12-25 20:07:13 2025-06-06 17:17:39
Microsoft-Windows-CloudStore%4Operational.evtx 2023-12-25 20:07:08 2025-06-06 17:17:39
Microsoft-Windows-Crypto-DPAPI%4Operational.evtx 2023-12-25 20:07:08 2025-06-06 17:17:39
Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx 2023-12-25 17:32:05 2025-06-06 09:21:01
Microsoft-Windows-Shell-Core%4Operational.evtx 2023-12-25 17:34:57 2025-06-06 09:21:01
Microsoft-Windows-AppReadiness%4Operational.evtx 2023-12-25 17:33:35 2025-06-05 21:14:19
Microsoft-Windows-AppReadiness%4Admin.evtx 2023-12-25 17:33:35 2025-06-05 21:14:19
Microsoft-Windows-AppModel-Runtime%4Admin.evtx 2023-12-25 17:32:05 2025-06-05 21:09:19
Microsoft-Windows-AppXDeploymentServer%4Operational.evtx 2023-12-25 17:33:31 2025-06-05 21:09:19
Microsoft-Windows-AppXDeployment%4Operational.evtx 2023-12-25 17:34:59 2025-06-05 21:09:19
Microsoft-Windows-LanguagePackSetup%4Operational.evtx 2023-12-28 19:34:30 2025-06-04 17:58:47
Microsoft-Windows-Diagnosis-PCW%4Operational.evtx 2023-12-25 17:32:54 2025-06-02 20:21:18
Microsoft-Windows-TZSync%4Operational.evtx 2024-01-01 19:47:20 2025-06-02 17:55:19
Microsoft-Windows-Application-Experience%4Program-Telemetry.evtx 2023-12-25 17:35:06 2025-06-02 15:48:31
Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx 2023-12-25 17:40:09 2025-06-02 14:23:32
Microsoft-Windows-Diagnosis-DPS%4Operational.evtx 2023-12-25 20:07:09 2025-06-02 14:07:36
Microsoft-Windows-WER-PayloadHealth%4Operational.evtx 2023-12-25 17:34:09 2025-06-02 14:07:36
Microsoft-Windows-Resource-Exhaustion-Resolver%4Operational.evtx 2023-12-27 14:15:19 2025-06-02 14:07:36
Microsoft-Windows-Diagnosis-Scripted%4Operational.evtx 2024-01-01 19:47:16 2025-06-01 17:58:39
Microsoft-Windows-Diagnosis-Scripted%4Admin.evtx 2024-01-01 19:47:16 2025-06-01 17:58:39
Microsoft-Windows-Diagnosis-Scheduled%4Operational.evtx 2023-12-25 20:09:51 2025-06-01 17:58:39
Microsoft-Windows-WER-Diag%4Operational.evtx 2023-12-26 17:40:16 2025-05-30 14:58:01
Microsoft-Windows-Security-SPP-UX-Notifications%4ActionCenter.evtx 2023-12-25 17:40:18 2025-05-29 19:15:15
Microsoft-Windows-Security-Mitigations%4KernelMode.evtx 2023-12-25 17:32:40 2025-05-29 19:10:15
Microsoft-Windows-WebAuthN%4Operational.evtx 2023-12-25 17:32:08 2025-05-29 19:05:15
Microsoft-Windows-TerminalServices-Printers%4Admin.evtx 2023-12-26 13:37:13 2025-05-29 18:38:32
Microsoft-Windows-HelloForBusiness%4Operational.evtx 2023-12-25 20:07:45 2025-05-28 15:32:32
Microsoft-Windows-Storage-Storport%4Operational.evtx 2023-12-25 17:32:07 2025-05-23 18:23:11
Microsoft-Windows-StorageManagement%4Operational.evtx 2023-12-26 19:47:26 2025-05-23 18:13:11
Microsoft-Windows-Biometrics%4Operational.evtx 2023-12-26 19:47:54 2025-05-23 17:53:49
Microsoft-Windows-ServerManager-MgmtProvider%4Operational.evtx 2023-12-25 20:07:56 2025-05-19 16:13:51
Microsoft-Windows-RemoteDesktopServices-SessionServices%4Operational.evtx 2023-12-25 23:19:25 2025-05-12 20:08:08
Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx 2023-12-25 17:34:10 2025-05-12 12:55:01
Microsoft-Windows-Security-Mitigations%4UserMode.evtx 2023-12-25 17:32:40 2025-05-12 12:45:12
Microsoft-Windows-Kernel-EventTracing%4Admin.evtx 2023-12-25 17:32:10 2025-05-12 10:31:49
Microsoft-Windows-Privacy-Auditing%4Operational.evtx 2023-12-25 17:40:12 2025-05-09 12:58:57
Microsoft-Windows-Known Folders API Service.evtx 2023-12-25 17:32:26 2025-04-18 12:46:01
Microsoft-Windows-Fault-Tolerant-Heap%4Operational.evtx 2024-01-11 07:08:34 2025-04-18 12:41:01
Microsoft-Windows-CertificateServicesClient-Lifecycle-System%4Operational.evtx 2023-12-25 17:34:28 2025-04-11 23:53:24
Microsoft-Windows-ShellCommon-StartLayoutPopulation%4Operational.evtx 2023-12-25 20:07:46 2025-04-10 19:19:47
Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx 2023-12-25 20:07:25 2025-04-10 19:14:47
Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx 2023-12-25 17:40:00 2025-04-10 19:14:47
Microsoft-Windows-User Profile Service%4Operational.evtx 2023-12-25 17:32:08 2025-04-10 19:14:47
Microsoft-Windows-User Device Registration%4Admin.evtx 2023-12-25 17:34:26 2025-04-10 19:14:47
Microsoft-Windows-GroupPolicy%4Operational.evtx 2023-12-25 17:32:09 2025-04-10 19:14:47
Microsoft-Windows-BitLocker%4BitLocker Management.evtx 2023-12-25 17:40:07 2025-04-10 04:32:40
Microsoft-Windows-Containers-Wcifs%4Operational.evtx 2023-12-25 17:32:09 2025-04-09 15:56:45
Microsoft-Windows-Kernel-WHEA%4Operational.evtx 2023-12-25 17:32:07 2025-04-09 15:56:45
Microsoft-Windows-Ntfs%4WHC.evtx 2023-12-25 17:32:07 2025-04-09 15:56:45
Microsoft-Windows-Partition%4Diagnostic.evtx 2023-12-25 17:32:08 2025-04-09 15:56:45
Microsoft-Windows-Containers-BindFlt%4Operational.evtx 2023-12-25 17:32:09 2025-04-09 15:56:45
Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx 2023-12-25 17:32:08 2025-04-09 15:56:45
Microsoft-Windows-SmbClient%4Connectivity.evtx 2023-12-25 17:34:31 2025-04-09 15:56:45
Microsoft-Windows-CodeIntegrity%4Operational.evtx 2023-12-25 17:32:09 2025-04-09 15:56:45
Microsoft-Windows-Diagnosis-PLA%4Operational.evtx 2024-01-24 18:55:22 2025-04-09 15:56:45
Microsoft-WindowsAzure-Status%4Plugins.evtx 2023-12-25 17:32:12 2025-04-09 15:56:45
Microsoft-Windows-StorageSpaces-Driver%4Operational.evtx 2023-12-25 17:32:07 2025-04-09 15:56:45
Microsoft-Windows-SMBServer%4Operational.evtx 2023-12-25 17:32:09 2025-04-09 15:56:45
Microsoft-Windows-WFP%4Operational.evtx 2023-12-25 17:32:09 2025-04-09 15:56:45
Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx 2023-12-25 17:32:08 2025-04-09 15:56:45
Microsoft-Windows-NetworkProfile%4Operational.evtx 2023-12-25 17:32:08 2025-04-09 15:56:45
Microsoft-Windows-NCSI%4Operational.evtx 2023-12-25 17:32:06 2025-04-09 15:56:45
Microsoft-Windows-Kernel-Boot%4Operational.evtx 2023-12-25 17:32:05 2025-04-09 15:51:45
Microsoft-Windows-AAD%4Operational.evtx 2023-12-25 17:32:04 2025-04-09 15:51:45
Microsoft-Windows-Kernel-LiveDump%4Operational.evtx 2025-04-09 15:45:38 2025-04-09 15:45:56
Microsoft-Windows-TWinUI%4Operational.evtx 2024-08-14 19:12:37 2025-04-09 15:44:51
Microsoft-Windows-VPN%4Operational.evtx 2023-12-25 17:32:09 2024-09-11 16:06:56
Microsoft-Windows-IKE%4Operational.evtx 2023-12-25 17:32:09 2024-09-11 16:06:55
Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx 2024-07-04 17:40:15 2024-09-11 12:29:35
Microsoft-Windows-DSC%4Operational.evtx 2024-04-11 02:27:55 2024-09-11 12:29:35
Microsoft-Windows-Security-SPP-UX-GenuineCenter-Logging%4Operational.evtx 2024-09-06 14:03:02 2024-09-11 12:29:35
Microsoft-Windows-RestartManager%4Operational.evtx 2024-09-06 14:04:46 2024-09-11 12:29:35
Microsoft-Windows-DSC%4Admin.evtx 2024-04-11 02:27:55 2024-08-03 23:55:37
Microsoft-Windows-Application-Experience%4Steps-Recorder.evtx 2023-12-25 17:35:06 2024-04-15 15:45:32
Microsoft-Windows-Application-Experience%4Program-Compatibility-Troubleshooter.evtx 2023-12-25 17:35:06 2024-04-15 15:45:32
Microsoft-Windows-Application-Experience%4Program-Inventory.evtx 2023-12-25 17:35:06 2024-04-15 15:45:31
Microsoft-Windows-DataIntegrityScan%4CrashRecovery.evtx 2023-12-25 23:12:29 2024-04-11 23:19:22
Microsoft-Windows-StorageSpaces-ManagementAgent%4WHC.evtx 2023-12-25 20:09:51 2024-04-11 16:32:05
Microsoft-Windows-Shell-ConnectedAccountState%4ActionCenter.evtx 2023-12-25 20:09:51 2024-04-11 16:32:05
Microsoft-Windows-UserPnp%4ActionCenter.evtx 2023-12-25 17:32:06 2024-04-11 16:32:05
WitnessClientAdmin.evtx 2023-12-26 15:07:23 2024-04-11 16:30:26
Microsoft-Windows-TerminalServices-Printers%4Operational.evtx 2023-12-26 13:37:13 2024-04-11 16:30:12
Microsoft-Windows-Kernel-PnP%4Driver Watchdog.evtx 2023-12-25 17:32:06 2024-04-11 16:30:08
Microsoft-Windows-ServerManager-MultiMachine%4Admin.evtx 2023-12-25 20:07:53 2024-04-11 16:30:08
Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Autopilot.evtx 2023-12-25 20:07:25 2024-04-11 16:29:59
Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Operational.evtx 2023-12-25 20:07:25 2024-04-11 16:29:59
Microsoft-Windows-PushNotification-Platform%4Admin.evtx 2023-12-25 20:07:13 2024-04-11 16:29:57
Microsoft-Windows-Shell-Core%4ActionCenter.evtx 2023-12-25 17:34:57 2024-04-11 16:29:56
Microsoft-Windows-Shell-Core%4LogonTasksChannel.evtx 2023-12-25 17:34:57 2024-04-11 16:29:56
Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx 2023-12-25 20:07:08 2024-04-11 16:29:55
Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx 2023-12-25 17:34:10 2024-04-11 16:22:51
Microsoft-Windows-PowerShell%4Admin.evtx 2023-12-25 17:33:02 2024-04-11 16:21:52
Microsoft-Windows-Crypto-NCrypt%4CertInUse.evtx 2023-12-25 17:32:08 2024-04-11 16:21:47
Microsoft-Windows-AppLocker%4EXE and DLL.evtx 2023-12-25 17:32:54 2024-04-11 16:21:44
Microsoft-Windows-AppLocker%4MSI and Script.evtx 2023-12-25 17:32:55 2024-04-11 16:21:44
Microsoft-Windows-Windows Defender%4WHC.evtx 2023-12-25 17:34:21 2024-04-11 16:20:55
Microsoft-Windows-Dhcp-Client%4Admin.evtx 2023-12-25 17:32:09 2024-04-11 16:20:53
Microsoft-Windows-SMBClient%4Operational.evtx 2023-12-25 17:34:31 2024-04-11 16:20:53
Microsoft-Windows-Dhcpv6-Client%4Admin.evtx 2023-12-25 17:32:09 2024-04-11 16:20:53
Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx 2023-12-25 17:33:32 2024-04-11 16:20:53
Microsoft-Windows-SMBServer%4Audit.evtx 2023-12-25 17:32:09 2024-04-11 16:20:53
Microsoft-Windows-SMBServer%4Connectivity.evtx 2023-12-25 17:32:09 2024-04-11 16:20:53
Microsoft-Windows-SMBServer%4Security.evtx 2023-12-25 17:32:09 2024-04-11 16:20:53
Microsoft-Windows-SmbClient%4Audit.evtx 2023-12-25 17:34:31 2024-04-11 16:20:53
Microsoft-Windows-SmbClient%4Security.evtx 2023-12-25 17:34:31 2024-04-11 16:20:53
Microsoft-Windows-Windows Firewall With Advanced Security%4FirewallDiagnostics.evtx 2023-12-25 17:32:09 2024-04-11 16:20:52
Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx 2023-12-25 17:32:09 2024-04-11 16:20:52
Microsoft-Windows-StateRepository%4Restricted.evtx 2023-12-25 17:32:09 2024-04-11 16:20:52
Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx 2023-12-25 17:32:09 2024-04-11 16:20:52
Microsoft-Windows-StorageSpaces-Driver%4Diagnostic.evtx 2023-12-25 17:32:07 2024-04-11 16:20:51
Microsoft-Windows-Storage-Storport%4Health.evtx 2023-12-25 17:32:07 2024-04-11 16:20:51
Microsoft-Windows-RemoteDesktopServices-RdpCoreTS%4Admin.evtx 2023-12-25 17:40:00 2024-04-11 16:20:50
Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx 2023-12-25 17:34:32 2024-04-11 16:20:50
Microsoft-Windows-Kernel-WHEA%4Errors.evtx 2023-12-25 17:32:06 2024-04-11 16:20:43
Windows Azure.evtx 2023-12-25 17:32:05 2024-04-11 16:20:39
Setup.evtx 2023-12-25 17:32:55 2024-04-11 16:20:39
Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx 2023-12-25 17:32:06 2024-04-11 16:20:39
Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx 2023-12-25 17:32:05 2024-04-11 16:20:37
HardwareEvents.evtx 2023-12-25 17:32:04 2024-04-11 16:20:37
Key Management Service.evtx 2023-12-25 17:32:05 2024-04-11 16:20:37
Internet Explorer.evtx 2023-12-25 17:32:05 2024-04-11 16:20:37
Microsoft-WindowsAzure-Diagnostics%4Bootstrapper.evtx 2023-12-25 17:32:17 2024-01-24 18:55:16
Microsoft-WindowsAzure-Diagnostics%4Runtime.evtx 2023-12-25 17:32:18 2024-01-24 18:55:15
Microsoft-Windows-DiskDiagnosticDataCollector%4Operational.evtx 2024-01-08 19:47:18 2024-01-08 19:47:18
Microsoft-Windows-Forwarding%4Operational.evtx 2023-12-25 17:40:08 2023-12-25 17:40:08
Microsoft-Windows-UAC-FileVirtualization%4Operational.evtx 2023-12-25 17:37:24 2023-12-25 17:38:43
Microsoft-Windows-MUI%4Operational.evtx 2023-12-25 17:34:19 2023-12-25 17:34:19
Microsoft-Windows-MUI%4Admin.evtx 2023-12-25 17:34:19 2023-12-25 17:34:19
Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx 2023-12-25 17:32:07 2023-12-25 17:32:07
Microsoft-Windows-UserPnp%4DeviceInstall.evtx 2023-12-25 17:32:05 2023-12-25 17:32:05

➕ 创建新文件