cscript //h:cscript //s
eventquery.vbs /l security >> c:\security_event.txt