tag:blogger.com,1999:blog-9518042.post8144120042666652886..comments2024-03-19T07:46:20.437-05:00Comments on Windows Incident Response: Event Log AnalysisUnknownnoreply@blogger.comBlogger7125tag:blogger.com,1999:blog-9518042.post-2138322656265782252008-11-22T21:43:00.000-05:002008-11-22T21:43:00.000-05:00Okay, but you're talking about extra code to (a) e...Okay, but you're talking about extra code to (a) either require the user to select the version, or (b) have the program determine the version. <BR/><BR/>I think maybe using a selector or switch in the code might work best.H. Carveyhttps://www.blogger.com/profile/08966595734678290320noreply@blogger.comtag:blogger.com,1999:blog-9518042.post-35636165251093872142008-11-22T09:19:00.000-05:002008-11-22T09:19:00.000-05:00If you use Excel 2007 you dont have the 65,000 row...If you use Excel 2007 you dont have the 65,000 row limit. It's something crazy like 1 million<BR/><BR/>Personally, I'd like to keep all the output in a single fileForensicGodhttps://www.blogger.com/profile/17772870788289313296noreply@blogger.comtag:blogger.com,1999:blog-9518042.post-76810970791985260962008-03-06T00:33:00.000-05:002008-03-06T00:33:00.000-05:00Screenclean being the most important, of course.Screenclean being the most important, of course.Billhttps://www.blogger.com/profile/15956125660689343228noreply@blogger.comtag:blogger.com,1999:blog-9518042.post-43291096048898989872008-03-05T12:05:00.000-05:002008-03-05T12:05:00.000-05:00TLDietrich,Email me at keydet89 at yahoo dot com, ...TLDietrich,<BR/><BR/>Email me at keydet89 at yahoo dot com, if you would please...H. Carveyhttps://www.blogger.com/profile/08966595734678290320noreply@blogger.comtag:blogger.com,1999:blog-9518042.post-91434256373005010752008-03-05T11:37:00.000-05:002008-03-05T11:37:00.000-05:00Harlan,I've used your lsevt and lsevt2 scripts inc...Harlan,<BR/><BR/>I've used your lsevt and lsevt2 scripts included with your book, and have been rather pleased with the results. <BR/><BR/>I'm curious if you'll be releasing Evt2Xls and EvtUI generally, or will they be part of a new book?TLDietrichhttps://www.blogger.com/profile/10748011465902087599noreply@blogger.comtag:blogger.com,1999:blog-9518042.post-60262482778459253102008-03-05T09:59:00.000-05:002008-03-05T09:59:00.000-05:00Mike,Yes, that's entirely possible...it will requi...Mike,<BR/><BR/>Yes, that's entirely possible...it will require some additional coding, but this is the kind of input from the "community" that I've been looking for...thanks!H. Carveyhttps://www.blogger.com/profile/08966595734678290320noreply@blogger.comtag:blogger.com,1999:blog-9518042.post-40779385469744552002008-03-05T09:00:00.000-05:002008-03-05T09:00:00.000-05:00I'm not very proficient in Excel but is there anyw...I'm not very proficient in Excel but is there anyway that EvtUI can take any additional events above 65,535 and put them into the extra "Sheets" that Excel provide so you can store all events in 1 Excel file?Anonymousnoreply@blogger.com