[NoodleBot™]

Got a LOT of requests for this after mentioning it on a thread somewhere for somebody.

So here it is. The extremely useful and anti-forensic batch code.

Proof:

Before: As you can see, over 4600 logs in one area alone (Security)


After:

@echo off
FOR /F "tokens=1,2*" %%V IN ('bcdedit') DO SET adminTest=%%V
IF (%adminTest%)==(Access) goto noAdmin
for /F "tokens=*" %%G in ('wevtutil.exe el') DO (call :do_clear "%%G")
echo.
echo goto theEnd
:do_clear
echo clearing %1
wevtutil.exe cl %1
goto :eof
:noAdmin
exit

If you don't know what to do beyond this point.. 😠
Save it in notepad and name it whateveryouwant.bat and then you may enjoy some privacy. I run this one a week + injunction with CCleaner DAILY.

Example:

[Null Byte]

This is good, but you could just turn off event logging so nothing will be recorded in the first place. Also please add spoilers :P

[NoodleBot™]

This is good, but you could just turn off event logging so nothing will be recorded in the first place. Also please add spoilers :P

It would still record about 80% of the logs there, as they are not displayed on event viewer.

[Aura]

Noodle, you and your batch scripts for Windows eh 😝

[Jagster™]

nice code mate, but quick question:
Cant you just use CCleaner to remove these logs? I have an option for "WIndows Events Logs" to be removed.

[NoodleBot™]

nice code mate, but quick question:
Cant you just use CCleaner to remove these logs? I have an option for "WIndows Events Logs" to be removed.

Ty it yourself and see what it cleans.

Cleaner is the worst anti forensic tool in history. It's a cleaner.

[Krox]

Very useful batch file :P thanks for your guide