neonprimetime security , just trying to help

LogParser.exe -i:EVT -h       [prints the columns available on that event log type] # Windows Auth (Security) select where LogonType <...