If you say so but I use it to scour all my DCs event logs and AFAIK they are secevent.evt files.