shadowbrokers-exploits/windows/Resources/Ep/Commands/Display/queryeventlogs_display.xsl
2017-04-14 11:45:07 +02:00

42 lines
No EOL
1.4 KiB
XML

<?xml version='1.0' ?>
<xsl:transform xmlns:xsl="http://www.w3.org/1999/XSL/Transform" version="1.0">
<xsl:import href="StandardTransforms.xsl"/>
<xsl:output method="text"/>
<xsl:template match="EventLog">
<xsl:text>The </xsl:text>
<xsl:value-of select="@name"/>
<xsl:text> event log contains </xsl:text>
<xsl:value-of select="@numRecords" />
<xsl:text> record(s).</xsl:text>
<xsl:call-template name="PrintReturn" />
<xsl:text>&#x09;Most recent entry is dated </xsl:text>
<xsl:call-template name="printTimeMDYHMS">
<xsl:with-param name="i" select="WriteTime" />
</xsl:call-template>
<xsl:text> GMT</xsl:text>
<xsl:call-template name="PrintReturn" />
<xsl:text>&#x09;Oldest Record Number = </xsl:text>
<xsl:value-of select="@oldestRecordNum" />
<xsl:call-template name="PrintReturn" />
<xsl:text>&#x09;Most Recent Record Number = </xsl:text>
<xsl:value-of select="@mostRecentRecordNum" />
<xsl:call-template name="PrintReturn" />
<xsl:call-template name="PrintReturn" />
</xsl:template>
<xsl:template match="ErrLog">
<xsl:text>Failed to query the </xsl:text>
<xsl:value-of select="@name"/>
<xsl:text> event log</xsl:text>
<xsl:call-template name="PrintReturn" />
<xsl:text>Win32 error : </xsl:text>
<xsl:value-of select="@osError"/>
<xsl:call-template name="PrintReturn" />
<xsl:call-template name="PrintReturn" />
</xsl:template>
</xsl:transform>