http://grey-x.net/tags/logs/ Recent content in Logs on Cybersécurité Hugo fr Fri, 14 Aug 2026 11:57:00 +0200 http://grey-x.net/posts/wevtutil/ Fri, 14 Aug 2026 11:57:00 +0200 http://grey-x.net/posts/wevtutil/ <blockquote> <p><code>GREY-X // WINDOWS LAB</code></p> <p><code>wevtutil — WINDOWS EVENT LOGS</code></p></blockquote> <p><code>wevtutil</code> est une commande native de Windows permettant de gérer les <strong>Event Logs</strong>.</p> <p>En cybersécurité, elle est particulièrement utile pour comprendre ce qu&rsquo;une action laisse comme traces sur une machine Windows.</p> <hr> <h1 id="01--lister-les-journaux"> <code>01 // Lister les journaux</code> <a class="heading-link" href="#01--lister-les-journaux"> <i class="fa-solid fa-link" aria-hidden="true" title="Link to heading"></i> <span class="sr-only">Link to heading</span> </a> </h1> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#000;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-cmd" data-lang="cmd"><span style="display:flex;"><span>wevtutil el </span></span></code></pre></div><p>On peut notamment retrouver :</p> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#000;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-text" data-lang="text"><span style="display:flex;"><span>Security </span></span><span style="display:flex;"><span>System </span></span><span style="display:flex;"><span>Application </span></span><span style="display:flex;"><span>Windows PowerShell </span></span><span style="display:flex;"><span>Microsoft-Windows-... </span></span></code></pre></div><hr> <h1 id="02--lire-le-journal-security"> <code>02 // Lire le journal Security</code> <a class="heading-link" href="#02--lire-le-journal-security"> <i class="fa-solid fa-link" aria-hidden="true" title="Link to heading"></i> <span class="sr-only">Link to heading</span> </a> </h1> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#000;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-cmd" data-lang="cmd"><span style="display:flex;"><span>wevtutil qe Security /c:10 /f:text </span></span></code></pre></div><p>Ici :</p>