Analytical Study on Forensic Relevance of Windows Event Logs
Priya P. Sajan · International Journal for Research in Applied Science and Engineering Technology · 2025
Event logs are crucial records automatically maintained by computer systems to track activities and operations. They serve as a key source of information for system administrators and forensic investigators to monitor, audit, and analyse both normal and suspicious activities. This research study explores the forensic relevance of Windows event logs. It further discusses the tools and techniques employed for log analysis, recovery, and centralization, emphasizing their role in enhancing organizational cybersecurity and forensic readiness.