Friday, February 15, 2008

Erase windows security log

The security log can't be deleted while the event logger service id running. Set the "Event Log" service to disable and restart the machine. Then delete the file "\windows\system32\config\SecEvent.evt". The values in this file can also be changed with a hex editor. Reset the event log service to automatic and it will restart the next time the machine restarts.

No comments: