Win7 ; Export Windows Event

Investigate, Uncategorized, Windows, Windows7

Instruction to export Windows “Event” for investigate

1.Open Control Panel

Win7 ; Export Windows Event2.Find the administrator tools or type “event” in the

Screen Shot 2016-12-16 at 08.59.31.png

3. Open Event Viewer and click “Windows Logs”Screen Shot 2016-12-16 at 08.59.45.png

4. Right Click “Applications” and choose “Save All Events As…”Screen Shot 2016-12-16 at 09.00.20.png

5. Save as file name (recommend to put Project_ComputerName_Application_YYYYMMDDhhmm file name format). and Click “SAVE” and Choose “No display information” then Click “OK”Screen Shot 2016-12-16 at 09.01.17.png

  • เมื่อ Save แล้วมีขึ้นมาถามว่าให้ Display infomration for these languages  ด้วยหรือไม่ให้กดเลือก diaplay มาด้วย

6. Repeate step 5 for other event (save as in separated file of each)

  • Security
  • Setup
  • System

Screen Shot 2016-12-16 at 09.01.40.pngScreen Shot 2016-12-16 at 09.01.57.png

Scroll to Top