Windows Powershell script to be run with Crowdstrike Falcon Real-Time Response. Script is intended to bring back only raw data, and not to parse any data locally on the host. This is intentional. The ...

Read: How to clear Event Log in Windows 3] Using wevtutil for Raw EVTX Logs EVTX files are Windows Event Log files stored in the proprietary .evtx format used by the Windows Event Log service.