Type Windows XML Event Log

From truxwiki.com
Jump to navigation Jump to search
<< Details >>
Defined Constant Type_Windows_XML_Event_Log
File Type Value 443
Parent Type None
Carve Yes
Format Details No
MIME Type application/octet-stream
Filename Extension evtx

Event Log (EVTX)

Description

Windows XML Event Log

Truxton Exploiters

This file type is handled by the following ETLs:

Items Produced

Truxton will extract the following from this file type:

Event IDs Handled

  • 1
  • 2
  • 21
  • 22
  • 25
  • 300
  • 600
  • 1001
  • 1002
  • 1006
  • 1102
  • 1149
  • 2003
  • 2102
  • 2104
  • 4616
  • 4624
  • 4625
  • 4663
  • 6100
  • 7045
  • 8001
  • 8003
  • 11001
  • 20001
  • 20003
  • 24576
  • 24577
  • 24578
  • 50067

Details

Retrieved from "https://truxwiki.com/index.php?title=Type_Windows_XML_Event_Log&oldid=9414"