Home > Products > Windows Passwords > Reset Windows Password > Screenshots > System events
Viewing system events
01.03.2024
New blog post
Dumping the history of users' IP addresses in Windows
20.02.2024
Reset Windows Password v14.1
IP addresses history viewer, fast disk search, local security editor and some more
02.01.2024
Wireless Password Recovery v6.9.0
A revision of the GPU health monitor along with some minor updates
23.12.2023
HAPPY NEW YEAR!
Happy New Year greetings and holidays discount

Articles and video

You may find it helpful to read our articles on Windows security and password recovery examples. Video section contains a number of movies about our programs in action

Reset Windows Password: view system events


All Windows OSes log various types of events that occur in the system time to time: errors in device or driver installations, application failures, security notifications, etc. Events help users and administrators to eliminate errors, perform diagnostics and monitoring the system, maintain its security. Events are stored in *.evtx files and are recorded in chronological order. Every evtx file corresponds to a specific event source or to an operating system component. For example, system.evtx keeps tracking of common system notifications. Security.evtx holds all security events. And so on.

The system event viewer is a simple tool allowing to display major events that occur in Windows Vista and later OSes. For example, starting or shutting down the system, logging on/off user accounts, drivers installation, etc.

 

Selecting Windows directory

System events - setting up Windows directory

First, you must select the Windows directory that holds the event logs. Typically, C:\Windows or D:\Windows.


 

Setting output filters

System events - setting output filters

On the next step, you can additionally configure output filters to display events that occurred in specific time. There's also an option for displaying all events (even unknown to the program). If the option is set, the program outputs known/major events only, all events otherwise.
 

 

Viewing Windows events

View system events

Collecting and processing the information may take considerable time, depending on the size of *.evtx files of the target system. In order to hide some certain records that are of no interest to you, right-click on the list of events and select one of the corresponding menu items. To sort the list, click one of its headers.