Windows-EVTX-Logs Collector
WinForensicLogs-Collector.ps1 <# .SYNOPSIS Collects Windows event logs and system artifacts for forensic investigation. .DESCRIPTION Exports security-relevant Windows event logs and optional system artifacts (network config, processes, services, scheduled tasks) to a timestamped folder under C:\ForensicLogs\. Supports full collection or targeted collection of specific log channels. .PARAMETER Logs One or more event log names to collect. When omitted, all logs are collected. .PARAMETER IncludeArtifacts Also collect system artifacts (SystemInfo, NetworkInfo, Processes, Services, ScheduledTasks) during a targeted -Logs run. Always collected in full mode. .PARAMETER ListLogs Print all available log names and exit without collecting anything. .PARAMETER SkipZip Do not compress the output folder after collection. By default, the folder is...