Skip to content
EVTX parser

Glossary

System block

The XML sibling of EventData that carries generic metadata: provider name/GUID, channel, Event ID, level, timestamp (TimeCreated SystemTime), the computer name, and the record's RecordID and EventR…

The XML sibling of EventData that carries generic metadata: provider name/GUID, channel, Event ID, level, timestamp (TimeCreated SystemTime), the computer name, and the record's RecordID and EventRecordID.