| Service Host Group Name | NetworkService |
| Service Short Description | Event Collector Service |
| Service Full Description | This service manages persistent subscriptions to events from remote sources that support WS-Management protocol. This includes Windows Vista event logs, hardware and IPMI-enabled event sources. The service stores forwarded events in a local Event Log. If this service is stopped or disabled event subscriptions cannot be created and forwarded events cannot be accepted. |
| Service Executable File Path | c:\windows\system32\wecsvc.dll |
| Service Host Launch Command | C:\Windows\system32\svchost.exe -k NetworkService 192.168.1.254 |
| Service Privileges | SeAuditPrivilege SeChangeNotifyPrivilege SeImpersonatePrivilege |
| Registry Key | HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Wecsvc |
| Depends on | HTTP Event Logging Service |
Learn how to Open JSON File and how to open PST file.