{"id":517,"date":"2022-04-17T12:56:56","date_gmt":"2022-04-17T12:56:56","guid":{"rendered":"https:\/\/eventlogxp.com\/blog\/?p=517"},"modified":"2022-04-17T12:56:56","modified_gmt":"2022-04-17T12:56:56","slug":"event-log-explorer-forensic-edition","status":"publish","type":"post","link":"https:\/\/eventlogxp.com\/blog\/event-log-explorer-forensic-edition\/","title":{"rendered":"Event Log Explorer Forensic Edition"},"content":{"rendered":"

Recently we released a new edition of Event Log Explorer \u2013 Forensic Edition. Currently it has a beta version status \u2013 the final release will appear after we complete the documentation and add extra forensic features.<\/p>\n

Here I will describe the difference between the standard and forensic editions.<\/p>\n

The program keeps all features of the Standard Edition, and you commonly don\u2019t need to use the Standard Edition if you have the Forensic one. Anyway, if you have a license key to Forensic Edition, you can use it with Standard Edition. However, if you have a license key to Standard Edition, it will work only with the current beta version of Forensic Edition but won\u2019t work with the final release. You will be able to upgrade from Standard to Forensic by paying the price difference.<\/p>\n

New program doesn\u2019t require elevation when you run it. So, if you don\u2019t have the admin rights, you can still run this program. The standard edition requires elevation to access the Security log and to manage event logs (e.g., clear them). Forensic users commonly work with log files, so it is not necessary to start it elevated. However, if you need to access the Security log, you may run it as Admin manually.<\/p>\n

When you start the program, you can find the major difference between the editions in the user interface. There are two new menu items in the main menu: Forensics and Script.<\/p>\n

 <\/p>\n

\"\"<\/a><\/p>\n

Script lets you create and run your own scripts (written in Pascal script) which helps you to automate some operations or create complex filters. We will add scripting to the Enterprise Edition of Event Log Explorer as well.<\/p>\n

Forensics menu opens access to the forensic features of the program.<\/p>\n

Add imaged computer<\/strong> lets you create a virtual computer in the Objects tree and access its log files as \u201clive\u201d logs.<\/p>\n

Forensic open file<\/strong> lets you open event log files using a \u201cforensic\u201d method. This includes opening files without Windows API and allows you to open damaged files.<\/p>\n

Deep scan<\/strong> lets you scan an event log file, a disk image or even a whole disk for events. This lets you extract events from highly damaged log files or unmounted or damaged disk images.<\/p>\n

Take and Load snapshot<\/strong> let you save your current event log view into a file for future analysis.<\/p>\n

I will write several articles about each new forensic feature soon, but now you can download and try the new forensic edition yourself:<\/p>\n

Download Event Log Explorer Forensic Edition<\/a> right now to get access to new forensic features of the program.<\/p>\n\"Facebook\"<\/a>\"twitter\"<\/a>\"reddit\"<\/a>\"pinterest\"<\/a>\"linkedin\"<\/a>\"mail\"<\/a>","protected":false},"excerpt":{"rendered":"

Recently we released a new edition of Event Log Explorer \u2013 Forensic Edition. Currently it has a beta version status \u2013 the final release will appear after we complete the documentation and add extra forensic features. Here I will describe the difference between the standard and forensic editions. The program keeps all features of the Standard Edition, and you commonly don\u2019t need to use the\u2026 Read More »<\/a><\/span><\/p>\n","protected":false},"author":2,"featured_media":518,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[40],"tags":[51,49],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/eventlogxp.com\/blog\/wp-json\/wp\/v2\/posts\/517"}],"collection":[{"href":"https:\/\/eventlogxp.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/eventlogxp.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/eventlogxp.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/eventlogxp.com\/blog\/wp-json\/wp\/v2\/comments?post=517"}],"version-history":[{"count":3,"href":"https:\/\/eventlogxp.com\/blog\/wp-json\/wp\/v2\/posts\/517\/revisions"}],"predecessor-version":[{"id":522,"href":"https:\/\/eventlogxp.com\/blog\/wp-json\/wp\/v2\/posts\/517\/revisions\/522"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/eventlogxp.com\/blog\/wp-json\/wp\/v2\/media\/518"}],"wp:attachment":[{"href":"https:\/\/eventlogxp.com\/blog\/wp-json\/wp\/v2\/media?parent=517"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/eventlogxp.com\/blog\/wp-json\/wp\/v2\/categories?post=517"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/eventlogxp.com\/blog\/wp-json\/wp\/v2\/tags?post=517"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}