Our ERD software was triggered, alerted, and isolated a web server for suspicious use of the “nltest.exe” command. Investigate the Windows Event logs to determine what occurred.

Event Logs Location: "C:\Users\LetsDefend\Desktop\Event Logs.evtx"

This challenge prepared by CyberGladius