Search notes:

C:\Windows\System32\winevt\Logs

This directory contains «Windows log files» with the extension .evtx.

See also

wmic.exe nteventlog

Index