Event Log Forensics with Log Parser

This is the heart of Kansa :( I am not sure why it is used over standard PowerShell. Does anyone else know?

Great job man its to good u saved a day for me ...

Very enlightening, thanks for your share

thank you so much for this amazing video.

Amazing video series! You covered some great foundational concepts. I know that in the examples provided, many of the parsed fields are set as aliases. When examining logs, how do you set conditions on aliases? For example, if I wanted to find all usernames within 4624's where Type 3 Logons were less than 10 count, how would I go about creating this query? Is Log Parser the right tool for this? Thanks for any help you can provide!

What happen that you changed this nice and smooth intro like here into idiotic, laud and annoying BBBBBBIIIIIIBBBIIIBIBIBIIIBIBI in 2019?

C:\Users\Hp\Desktop\logs\10>"C:\Program Files (x86)\Log Parser 2.2\LogParser.exe" -stats:OFF -i:EVT "SELECT * FROM 'Security.evtx' WHERE EventID = '4624'"
Error: Error retrieving files: Error opening file "C:\Users\Hp\Desktop\logs\10\Security.evtx": The system cannot find the file specified.
I am getting this error while running the query

Log parser is totally legal in Mozilla never Windows because it doesn’t create files. It’s a duplicate of prompt. Used to bring data to now not to explain data

Isn’t it illegal to example log parser due to the directory being cancelled in 2005 by Internet Explorer and transferee tranced to Mozilla Firefox?

Thanks for this awesome content. Do you have a solution while opening an event logs, it is giving me "the data is invalid" error, but I know the data is not corrupted. It has something to do with mismatched floating footer. Was referring some docs online, but couldn't follow.

Nice video TY

Very enlightening, congratulations for the work

Loved it, thanks for sharing...

Great intro to the log parser tool. Sad Microsoft does not provide/teach as part of "Getting Started". Thanks.

On aime :)

Just wanted to say again how much I appreciate this series. Good luck at the 4cast awards 👍

I am a huge fan of your work. You explain everything simple and easy.
I would like to know which is an easier tool in (splunk, log parser ) which one do you prefer and why ?

On supporte :)

sir.... how to extract the software execution data .

Hi love the videos, could you maybe zoom in slightly? the text is always very small, notepad section was a lovely size