Skip to content

A tool mainly to erase specified records from Windows event logs, with additional functionalities.

Notifications You must be signed in to change notification settings

webpentest/EventCleaner

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

5 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

EventCleaner

A tool mainly to erase specified records from Windows event logs, with additional functionalities.

EventCleaner suspend

suspends logging threads of the windows event log service, after which no logs will be recorded
暂停日志线程,停止日志记录

EventCleaner normal

resumes logging threads of the windows event log service
恢复日志线程

EventCleaner closehandle

frees handle acquired exclusively by the windows event log service to security.evtx,
so that we can manipulate the file
解除 security.evtx的文件占坑

EventCleaner 100

remove the log with id 100
删除 event record id 为 100 的日志

How to use:

  1. EventCleaner closehandle
  2. EventCleaner 100
  3. EventCleaner suspend
  4. do anything without worrying about logs
  5. EventCleaner normal
  6. delete EventCleaner

by pr0mise @ 360 A-TEAM

Thanks for the help from darkray & Drknight


Screenshots

test

test

test

test

test

test

test

About

A tool mainly to erase specified records from Windows event logs, with additional functionalities.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • C++ 98.5%
  • C 1.5%