forked from QAX-A-Team/EventCleaner
-
Notifications
You must be signed in to change notification settings - Fork 2
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge branch 'master' of github.com:360-A-Team/EventCleaner
- Loading branch information
Showing
1 changed file
with
38 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,38 @@ | ||
# EventCleaner | ||
A tool mainly to erase specified records from Windows event logs, with additional functionalities. | ||
|
||
**EventCleaner suspend** | ||
|
||
suspends logging threads of the windows event log service, after which no logs will be recorded | ||
暂停日志线程,停止日志记录 | ||
|
||
**EventCleaner normal** | ||
|
||
resumes logging threads of the windows event log service | ||
恢复日志线程 | ||
|
||
**EventCleaner closehandle** | ||
|
||
frees handle acquired exclusively by the windows event log service to security.evtx, | ||
so that we can manipulate the file | ||
解除 security.evtx的文件占坑 | ||
|
||
**EventCleaner 100** | ||
|
||
remove the log with id 100 | ||
删除 event record id 为 100 的日志 | ||
|
||
|
||
**How to use:** | ||
|
||
1. EventCleaner closehandle | ||
2. EventCleaner 100 | ||
3. EventCleaner suspend | ||
4. do anything without worrying about logs | ||
5. EventCleaner normal | ||
6. delete EventCleaner | ||
|
||
|
||
by pr0mise @ 360 A-TEAM | ||
|
||
**Thanks for the help from darkray & Drknight** |