Skip to content

Instantly share code, notes, and snippets.

@000pp
Created May 10, 2024 01:24
Show Gist options
  • Save 000pp/3ae492440b157ae43cfa74e0395a7293 to your computer and use it in GitHub Desktop.
Save 000pp/3ae492440b157ae43cfa74e0395a7293 to your computer and use it in GitHub Desktop.
# All Windows Event logs
[monitor://C:\Windows\System32\Winevt\Logs\*.evtx]
disabled = false
index=winevtx
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment