Tips And Tricks
Find Windows Filetime objects in Binary Data I did some reverse engineering of 3rd party software in a client environment and wrote this script to help determine how they logged events. Remotely Change BitLocker Protections #Delete existing protectionsmanage-bde.exe -cn ComputerName -protectors -delete c: -Type TPMAndPINmanage-bde.exe -cn ComputerName -protectors -delete c: -Type RecoveryPassword#Now that all of the previous Protectors a... Using FullEventLogView From Nirsoft Parsing Windows Event Logs from an incident collection can be a pain without the right tools. IMHO, the native Windows Event Viewer is largely garbage.