?
2017-02-23 22:38:06 UTC
Anyway, they are trying to sack her and as evidence she has used the computer they have provided pages of windows event logs where she worked nights and the computer was active (they have omitted data from the computer on nights when she did not work). All I can make out is that the computer was doing standard background tasks, but I need to easily convert the Event Source and Event ID into phrases the layman can read.
It s not like they provided security logs showing logon/logoff events, just event logs!
I need someway of turning this list into a series of statements that prove (this means nothing) and that these are all System events not User events
Thanks