Question:
Where can I convert Windows Event Log Events into understandable phrases?
?
2017-02-23 22:38:06 UTC
Long story short, my mother in law is ina relationship with the ex-owner of a care home. He left to start a new business but she still works there. She is being accused of stealing company files (I ve known this woman for 20 years, and she doesn t even know how to type up a letter let alone browse folders or copy files).

Anyway, they are trying to sack her and as evidence she has used the computer they have provided pages of windows event logs where she worked nights and the computer was active (they have omitted data from the computer on nights when she did not work). All I can make out is that the computer was doing standard background tasks, but I need to easily convert the Event Source and Event ID into phrases the layman can read.

It s not like they provided security logs showing logon/logoff events, just event logs!

I need someway of turning this list into a series of statements that prove (this means nothing) and that these are all System events not User events

Thanks
Three answers:
k w
2017-02-24 00:15:54 UTC
wrong forum
WRG
2017-02-23 22:51:17 UTC
You get a professional to "decode it". It will make much better evidence. That is about as plain english as you are going to get. I'm no expert but the only action I see on that page that may have been run by a human is the BROWSER call.
?
2017-02-23 22:38:53 UTC
Example log, sorry about the quality, Yahoo compressed it.......


This content was originally posted on Y! Answers, a Q&A website that shut down in 2021.
Loading...