Windows.old event viewer logs

windows security events logging event-viewer
Julijus Bogdanovas picture Julijus Bogdanovas · Jul 31, 2015 · Viewed 9.6k times · Source

Is it possible to see old event log files, those that you can see in event viewer? But I only have windows.old folder available.

Situation is that, that some of our company's computers were hacked. I want to check if mine was affected too.

A few days ago I have updated windows 8.1 to Windows 10; now all event viewer logs are gone. But I have a windows.old folder with files on C: drive. How can I retrieve event viewer logs from there?

Answer

bayo picture bayo · Jul 31, 2015

The events are stored by default in "C:\Windows\System32\winevt\Logs" (.evt, .evtx files) . If you can locate them, you can simply open them in the Event Viewer application.

Related questions

How to create .pfx file from certificate and private key?

I need .pfx file to install https on website on IIS. I have two separate files: certificate (.cer or pem) and private key (.crt) but IIS accepts only .pfx files. I obviously installed certificate and it is available in certificate …

Read More
The difference between the 'Local System' account and the 'Network Service' account?

I have written a Windows service that spawns a separate process. This process creates a COM object. If the service runs under the 'Local System' account everything works fine, but if the service runs under the 'Network Service' account, the …

Read More
Windows equivalent of OS X Keychain?

Is there an equivalent of the OS X Keychain, used to store user passwords, in Windows? I would use it to save the user's password for a web service that my (desktop) software uses. From the answers to this related …

Read More