Loading…
Drop a Windows .evtx log. Walks the real ElfFile → ElfChnk → record structure and extracts each record's timestamp + readable BinXML strings (provider, channel, computer, EventData). Lightweight triage view, not a full XML render. 100% client-side.