MigXmlHelper.IsUpgrade() MigXmlHelper.IsOSEarlierThan("NT","6.0.0.0") %WINDIR%\system32\config [*.evt] HKLM\SYSTEM\ControlSet$\Services\Eventlog\* [*] HKLM\SYSTEM\ControlSet$\Services\Eventlog\$ [File]