Logs

Shows legacy Windows EVT events with provider, ID, message data, user, host, timestamps, and recovery status.

Shows Program Compatibility Assistant application launches with executable paths and precise timestamps.

Shows Program Compatibility Assistant execution records with paths, times, status, vendor, version, and exit code.

Shows Windows Error Reporting events with application, crash or hang metadata, timestamps, status, and report IDs.

Shows Windows EVTX events with timestamps, providers, event IDs, users, hosts, processes, and event data.