How to extract log files from a harddrive image

Mount the image, using or as you would a normal image.

Browser to the following location (for Windows 10 and recent versions)


Copy all the files in the directory, then create a timeline of them using log2timeline or browse them with something like EventLog Explorer.