wevtutil
Named by 2 kept items in this workspace.
Search every workspace for wevtutil. It matches the name as written, so it can find other things that share it.
The items that name it 2
Windows utility abused to clear event logs
Windows Event Log utility used by the threat actor to clear the security, system, application, and Setup event logs
All technologies in this workspace.