From e2698f6583ea2f8bc415f2e55dc0786ab7d58b9c Mon Sep 17 00:00:00 2001
From: Costas K <11378310+kacos2000@users.noreply.github.com>
Date: Wed, 8 Mar 2023 21:42:44 +0200
Subject: [PATCH] Update README.md
---
README.md | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/README.md b/README.md
index 93d547b..f2005ed 100644
--- a/README.md
+++ b/README.md
@@ -93,7 +93,9 @@
2a. [Win10 csv](https://github.com/kacos2000/Queries/blob/master/full_event_names1.csv) &
2b. [Win11 csv (VM)](https://github.com/kacos2000/Queries/blob/master/full_event_names2.csv)
- *[Event Tracing GUID + Provider name list](https://github.com/kacos2000/Queries/blob/master/providers.txt)*
-
+ - *(Related event log: 'Microsoft-Windows-UniversalTelemetryClient%4Operational.evtx')*
+ - ----------
+
`(*)` Adjust settings:
`HKLM: SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\EventTranscriptKey`
- DWORD `EnableEventTranscript` *(0: disabled, 1: enabled)*