evtxResourceIDGaps

evtxResourceIDGaps is a script to evaluate Windows EVTX logging data to identify evidence of tampered loging data.

By
Joshua Wright