Mount the image, using imageMounter.py or as you would a normal image.
Browser to the following location (for Windows 10 and recent versions)
C:\Windows\System32\config\WinEvt\Logs
Copy all the files in the directory, then create a timeline of them using log2timeline or browse them with something like EventLog Explorer.