Search notes:
WMIC.exe nteventlog
PS C:\> wmic nteventlog get logFileName,name,numberOfRecords
LogfileName Name NumberOfRecords
Application C:\WINDOWS\System32\Winevt\Logs\Application.evtx 5566
HardwareEvents C:\WINDOWS\System32\Winevt\Logs\HardwareEvents.evtx 0
Internet Explorer C:\WINDOWS\System32\Winevt\Logs\Internet Explorer.evtx 0
Key Management Service C:\WINDOWS\System32\Winevt\Logs\Key Management Service.evtx 0
Parameters C:\WINDOWS\System32\Winevt\Logs\Parameters.evtx 0
Security C:\WINDOWS\System32\Winevt\Logs\Security.evtx 26273
State C:\WINDOWS\System32\Winevt\Logs\State.evtx 0
System C:\WINDOWS\System32\Winevt\Logs\System.evtx 51773
Windows PowerShell C:\WINDOWS\System32\Winevt\Logs\Windows PowerShell.evtx 6702