EventCleaner: erase specified records from Windows event logs
EventCleaner
A tool mainly to erase specified records from Windows event logs, with additional functionalities.
EventCleaner suspend
suspends logging threads of the windows event log service, after which no logs will be recorded
EventCleaner normal
resumes logging threads of the windows event log service
EventCleaner closehandle
frees handle acquired exclusively by the windows event log service to security.evtx, so that we can manipulate the file
EventCleaner 100
remove the log with id 100
How to use:
- EventCleaner closehandle
- EventCleaner 100
- EventCleaner suspend
- do anything without worrying about logs
- EventCleaner normal
- delete EventCleaner
Author: pr0mise @ 360 A-TEAM