I have found that Windows logs every event such as system login/out, USB connection's history, etc. This all can be viewed in Event viewer.
But my question is Where on the filesystem are the event log files located on Windows 7?
-
Do you mean "where on the filesystem are the event log files located"?– BenjiWiebeDec 27, 2014 at 4:56
-
yes, thats exactly what it meant.– DamonDec 27, 2014 at 5:17
Add a comment
|
1 Answer
These files are located in the folder C:\Windows\System32\winevt\Logs with the extension .evtx
-
Something unusual most probably relating to the W10 upgrade from Win8.1 ~Apr 2016 placed all the
evtxlog files in C:\Logs with the same date stamp. No such problem with the ones in C:\Windows\System32\winevt\Logs! Oct 4, 2019 at 10:15