1100	.evt
1101	evt
1108	Microsoft Windows Network
1110	Computer
1111	Data
1112	Data Length
1113	Description
1114	Event Category
1115	Event ID
1116	Event Type
1117	Generated Date
1118	Generated Time
1119	Length
1120	Record Number
1121	SID
1122	Source
1123	User
1124	User Domain
1125	User Type
1126	Written Date
1127	Written Time
1141	CategoryMessageFile
1142	ParameterMessageFile
1143	EventMessageFile
1148	SYSTEM\CurrentControlSet\Services\EventLog\%s\%s
1152	Archived Event Log Files(*.EVT)|*.evt|
1153	Select an Archived Event Log File
1155	P2SEVT.DLL
1200	NT Archived Event Log
1201	NT Current Event Log
1202	Application
1203	System
1204	Security
1205	[LOCAL]
1224	Error
1225	Warning
1226	Information
1227	Success Audit
1228	Failure Audit
1229	User
1230	Group
1231	Domain
1232	Alias
1233	Well Known Group
1234	Deleted Account
1235	Invalid
1236	Unknown
1237	S-%d-
1238	bad_revision==%d
1239	-%d
1240	UnknownAuthority!
1241	NONE
1242	The description for Event ID ( %d ) in Source ( %s ) could not be found. It contains the following insertion string(s): 
1243	P2SEVT.dll Message
1244	Failed in getting OS version information.
1245	Too Much Computer Selected
1246	None of the NT machines is available.
1248	%s failed; \nError code: %08X
1249	Unknown Error Code: 0x%08x.
1501	Accesses
1502	Account Management
1503	Assigned
1504	Assigned To
1505	Authentication Package
1506	Authentication Package Name
1507	Caller Domain
1508	Caller Logon ID
1509	Caller User Name
1510	Client Domain
1511	Client Logon ID
1512	Client User Name
1513	Creator Process ID
1514	Detailed Tracking
1515	Domain
1516	Domain ID
1517	Domain Name
1518	Handle ID
1519	Image File Name
1520	Logon ID
1521	Logon Process
1522	Logon Process Name
1523	Logon Type
1524	Logon/Logoff
1525	Member
1526	New Account ID
1527	New Account Name
1528	New Domain
1529	New Handle ID
1530	New Process ID
1531	New Type
1532	Notification Package Name
1533	Number of audit messages discarded
1534	Object Access
1535	Object Handle
1536	Object ID
1537	Object Name
1538	Object Server
1539	Object Type
1540	Operation ID
1541	Policy Change
1542	Primary Domain
1543	Primary Logon ID
1544	Primary User Name
1545	Privilege Use
1546	Privileges
1547	Process ID
1548	Removed From
1549	Server
1550	Service
1551	Source Handle ID
1552	Source Process ID
1553	System
1554	Target Account ID
1555	Target Account Name
1556	Target Domain
1557	Target Handle ID
1558	Target Process ID
1559	Type of change
1560	User Name
1561	User Right
1562	Workstation Name
1563	Short Description