ApplicationEvents

Windows Application Event Log

Windows
4 paths
AppEvent.evtapplication.evtx
Version 1
Drew Ervin

Paths on disk

4 paths

References

2 links

Collect it

KAPE command line for ApplicationEvents

Source

Destination

--vss--vhdx

kape.exe --tsource C: --tdest D:\Evidence --target ApplicationEvents

Run with administrator privileges. KAPE Documentation

Part of these collections

9 collections collect this target