Skip to content

add (content) creation time to evtxexport output #21

@joachimmetz

Description

@joachimmetz

Per https://blog.fox-it.com/2019/06/04/export-corrupts-windows-event-log-files/

  • add (content) creation time (when present) to evtxexport output (mainly as UX improvement)
  • describe corruption scenario in documentation

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions