312-49 · Question #690
What does the command "C:\>wevtutil gl <log name>" display?
The correct answer is A. Configuration information of a specific Event Log. The 'wevtutil' (Windows Events Command Line Utility) command uses 'gl' (get-log) to retrieve and display configuration information for a specific event log, including properties such as whether the log is enabled, its maximum size, retention policy, log file path, and access…
Question
What does the command "C:>wevtutil gl <log name>" display?
Options
- AConfiguration information of a specific Event Log
- BEvent logs are saved in .xml format
- CEvent log record structure
- DList of available Event Logs
How the community answered
(30 responses)- A93% (28)
- B3% (1)
- D3% (1)
Explanation
The 'wevtutil' (Windows Events Command Line Utility) command uses 'gl' (get-log) to retrieve and display configuration information for a specific event log, including properties such as whether the log is enabled, its maximum size, retention policy, log file path, and access permissions. Other wevtutil parameters serve different purposes: 'el' lists all available event logs, 'qe' queries events, and 'epl' exports logs. Understanding wevtutil is essential for Windows forensic investigations as event logs are a primary source of evidence.
Topics
Community Discussion
No community discussion yet for this question.