...repaired copy is then loaded into Event Rover for review and analysis. Another new feature that is helpful to forensicexaminers is the ability to specify an alternate computer for message file and metadata lookups. Both EVT and EVTX log...
http://news.thomasnet.com/fullstory/563720