AppLocker event log parser?

snyderkv
snyderkv used Ask the Experts™
on
EE,

Thanks for reading, I have forwarded just a few events from source computers to a collector via a subscription. My question is how to  export the results to some sort of file i.e. xml with the list of applications for approval/remediation in an easier to read format?

Thanks in advance for the assistance
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
View Solution Only
yo_beeDirector of Information Technology

Commented:
I am not seeing any events.
snyderkv

Author

Commented:
Event IDs 8003,8006,8004,8007. I attached a jpg
AppLocker.jpg
Topic Advisor
Most Valuable Expert 2016
Commented:
Right-click 'EXE and DLL' and choose 'Save all Events as', set 'SaveAs Type' to XML ... and save the events.

You now have an XML file that you can import into Excel for example. In a new Excel sheet, use Data -> From other Sources -> From XML Data Import - select the file and have Excel determine the schema.
snyderkv

Author

Commented:
I meant XLS, but I didn't know you can also import csv and xml. Cool

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial