#evtx

• Extracting WEVT_TEMPLATES from PE files June 1, 2020