EE, thanks for reading
I have AppLocker in audit mode spitting out event ID 8002 8003 8005 and 8006 to a 2k8 collector and looking to export this into an excel spreadsheet.
First, I saved the collector events to my desktop c:\Events.evtx where I have xml installed and just need the data from these two events that I can sort out for our IA team to determine weather or not to make exceptions for that software.
This would be a huge help if anybody can assist.
Thanks again in advance