How to extract log files from a harddrive image

Mount the image, using imageMounter.py or as you would a normal image.

Browser to the following location (for Windows 10 and recent versions)

C:\Windows\System32\config\WinEvt\Logs

Copy all the files in the directory, then create a timeline of them using log2timeline or browse them with something like EventLog Explorer.