Search Windows EVTX files with precision