evtxResourceIDGaps

evtxResourceIDGaps is a script to evaluate Windows EVTX logging data to identify evidence of tampered loging data.

By Joshua Wright