{"id":8106,"date":"2026-09-04T10:10:53","date_gmt":"2026-09-04T02:10:53","guid":{"rendered":"https:\/\/www.xinyixx.com\/?p=8106"},"modified":"2026-09-04T10:10:55","modified_gmt":"2026-09-04T02:10:55","slug":"logmedic","status":"publish","type":"post","link":"https:\/\/www.xinyixx.com\/index.php\/2026\/09\/04\/logmedic\/","title":{"rendered":"\u5fd7\u8bca LogMedic\uff1a\u628a Windows \u4e8b\u4ef6\u65e5\u5fd7\u91cc\u90a3 96% \u7684\u566a\u58f0\u7b5b\u6389"},"content":{"rendered":"\n

\u9879\u76ee\u5730\u5740\uff1aghostgorge\/LogMedic: LogMedic<\/a><\/h1>\n\n\n\n
\n

\u4e00\u4e2a\u7528 Python \u5199\u7684 Windows \u65e5\u5fd7\u5206\u6790\u4e0e\u7cfb\u7edf\u8fd0\u7ef4\u5de5\u5177\u3002\u96f6\u7b2c\u4e09\u65b9\u4f9d\u8d56\uff0c\u5355\u6587\u4ef6 exe\uff0c\u5185\u7f6e 100 \u6761\u4e8b\u4ef6 ID \u77e5\u8bc6\u5e93\u300145 \u4e2a\u84dd\u5c4f\u505c\u6b62\u7801\u548c 23 \u5957\u5904\u7f6e\u65b9\u6848\u3002<\/p>\n<\/blockquote>\n\n\n\n

\n\n\n\n

\u4e00\u3001\u8d77\u56e0\uff1a\u6253\u5f00\u4e8b\u4ef6\u67e5\u770b\u5668\uff0c\u7136\u540e\u5462\uff1f<\/h2>\n\n\n\n

\u7535\u8111\u52a8\u4e0d\u52a8\u91cd\u542f\u3001\u5f00\u673a\u8d8a\u6765\u8d8a\u6162\u3001\u67d0\u4e2a\u8f6f\u4ef6\u8001\u662f\u5d29\u3002\u8001\u624b\u4f1a\u8bf4\uff1a\u53bb\u770b\u4e8b\u4ef6\u67e5\u770b\u5668\u3002<\/p>\n\n\n\n

\u4e8e\u662f\u4f60\u6253\u5f00\u4e86 eventvwr.msc<\/code>\uff0c\u5c55\u5f00”Windows \u65e5\u5fd7 \u2192 \u7cfb\u7edf”\uff0c\u770b\u5230\u5bc6\u5bc6\u9ebb\u9ebb\u4e00\u5c4f\u7ea2\u53c9\u3002\u7136\u540e\u5462\uff1f<\/p>\n\n\n\n

\u6211\u5728\u4e00\u53f0\u6b63\u5e38\u529e\u516c\u7528\u7684 Dell OptiPlex \u4e0a\u505a\u4e86\u4e2a\u7edf\u8ba1\u3002\u6700\u8fd1 30 \u5929\uff0c”\u7cfb\u7edf”\u548c”\u5e94\u7528\u7a0b\u5e8f”\u4e24\u4e2a\u65e5\u5fd7\u91cc\uff0c\u9519\u8bef\u548c\u8b66\u544a\u4e00\u5171 3900 \u6761<\/strong>\u3002\u6309\u51fa\u73b0\u6b21\u6570\u6392\u5e8f\uff0c\u524d\u4e94\u540d\u662f\u8fd9\u6837\u7684\uff1a<\/p>\n\n\n\n

\u6392\u540d<\/th>\u4e8b\u4ef6\u6765\u6e90 \/ ID<\/th>30 \u5929\u6b21\u6570<\/th>\u5b9e\u9645\u5f71\u54cd<\/th><\/tr><\/thead>
1<\/td>Security-SPP \/ 8229<\/td>274<\/td>\u65e0<\/strong><\/td><\/tr>
2<\/td>FilterManager \/ 11<\/td>273<\/td>\u65e0<\/strong><\/td><\/tr>
3<\/td>DistributedCOM \/ 10016<\/td>157<\/td>\u65e0<\/strong><\/td><\/tr>
4<\/td>DistributedCOM \/ 10010<\/td>155<\/td>\u65e0<\/strong><\/td><\/tr>
5<\/td>Kernel-PnP \/ 219<\/td>104<\/td>\u65e0<\/strong><\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

\u524d\u4e94\u540d\u52a0\u8d77\u6765 963 \u6761\uff0c\u5168\u662f\u566a\u58f0\u3002<\/p>\n\n\n\n

    \n
  • Security-SPP 8229<\/strong>\uff1a”\u89c4\u5219\u5f15\u64ce\u672a\u80fd\u6267\u884c\u4e00\u9879\u6216\u591a\u9879\u8ba1\u5212\u7684\u64cd\u4f5c\uff0c\u9519\u8bef\u4ee3\u7801 0x80080005″\u3002\u53ea\u8981 slmgr \/xpr<\/code> \u663e\u793a\u7cfb\u7edf\u5df2\u6fc0\u6d3b\uff0c\u8fd9\u6761\u5c31\u6ca1\u6709\u4efb\u4f55\u5b9e\u9645\u5f71\u54cd\u3002<\/li>\n\n\n\n
  • DCOM 10016<\/strong>\uff1a\u5fae\u8f6f\u5b98\u65b9\u6587\u6863\u767d\u7eb8\u9ed1\u5b57\u5199\u7740\uff0c\u8fd9\u7c7b\u4e8b\u4ef6\u5728\u591a\u6570\u60c5\u51b5\u4e0b\u53ef\u4ee5\u5b89\u5168\u5ffd\u7565<\/strong> \u2014\u2014 \u7cfb\u7edf\u5185\u7f6e\u7ec4\u4ef6\u7684\u9ed8\u8ba4 DCOM \u6743\u9650\u672c\u6765\u5c31\u662f\u4e0d\u5b8c\u6574\u7684\u3002<\/li>\n\n\n\n
  • Kernel-PnP 219 + WUDFRd + 0xC0000365<\/strong>\uff1a\u84dd\u7259\/\u4f20\u611f\u5668\u7c7b\u8bbe\u5907\u7684\u7528\u6237\u6a21\u5f0f\u9a71\u52a8\u6846\u67b6\u63d0\u793a\uff0c\u8bbe\u5907\u90fd\u6b63\u5e38\u5c31\u4e0d\u7528\u7ba1\u3002<\/li>\n<\/ul>\n\n\n\n

    \u800c\u540c\u4e00\u4efd\u65e5\u5fd7\u91cc\uff0c\u771f\u6b63\u8981\u547d\u7684\u4e1c\u897f\u662f\u8fd9\u51e0\u6761\uff1a<\/p>\n\n\n\n

    \u4e8b\u4ef6<\/th>30 \u5929\u6b21\u6570<\/th>\u8bf4\u660e<\/th><\/tr><\/thead>
    Kernel-Power 41<\/strong><\/td>4<\/strong><\/td>\u7cfb\u7edf 4 \u6b21\u6ca1\u6b63\u5e38\u5173\u673a\u5c31\u91cd\u542f\u4e86<\/td><\/tr>
    EventLog 6008<\/strong><\/td>2<\/strong><\/td>\u4e0a\u6b21\u5173\u673a\u662f\u610f\u5916\u7684<\/td><\/tr>
    volmgr 161<\/strong><\/td>4<\/strong><\/td>\u84dd\u5c4f\u8f6c\u50a8\u6587\u4ef6\u521b\u5efa\u5931\u8d25<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

    \u566a\u58f0\u5360\u4e86 96%\uff0c\u771f\u95ee\u9898\u53ea\u6709 4%\uff0c\u800c\u4e14\u6392\u5728\u5217\u8868\u6700\u5e95\u4e0b\u3002<\/strong><\/p>\n\n\n\n

    \u8fd9\u5c31\u662f\u4e8b\u4ef6\u67e5\u770b\u5668\u6700\u5927\u7684\u95ee\u9898\uff1a\u5b83\u4e0d\u662f\u770b\u4e0d\u5230\u6570\u636e\uff0c\u662f\u6570\u636e\u592a\u591a\u3002\u4e00\u4e2a\u666e\u901a\u7528\u6237\u6309”\u9519\u8bef\u6570\u91cf”\u6392\u5e8f\u53bb\u6392\u67e5\uff0c\u4f1a\u82b1\u4e00\u6574\u5929\u6298\u817e DCOM \u6743\u9650\uff08\u6539\u6ce8\u518c\u8868\u6240\u6709\u8005\u3001\u8fdb\u7ec4\u4ef6\u670d\u52a1\u914d\u6743\u9650\uff09\uff0c\u7136\u540e\u4ec0\u4e48\u4e5f\u6ca1\u89e3\u51b3\u2014\u2014\u56e0\u4e3a\u4ed6\u538b\u6839\u6ca1\u6ce8\u610f\u5230\u90a3 4 \u6b21\u5f02\u5e38\u91cd\u542f\u3002<\/p>\n\n\n\n

    \u5fd7\u8bca LogMedic \u5c31\u662f\u4e3a\u4e86\u89e3\u51b3\u8fd9\u4e00\u4ef6\u4e8b\uff1a\u66ff\u4f60\u505a\u5224\u65ad\uff0c\u800c\u4e0d\u662f\u66ff\u4f60\u7ffb\u65e5\u5fd7\u3002<\/strong><\/p>\n\n\n\n

    \n\n\n\n

    \u4e8c\u3001\u5b83\u662f\u600e\u4e48\u5224\u65ad\u7684<\/h2>\n\n\n\n

    2.1 \u6309\u77e5\u8bc6\u5e93\u5b9a\u7ea7\uff0c\u4e0d\u6309\u65e5\u5fd7\u7ea7\u522b<\/h3>\n\n\n\n

    \u8fd9\u662f\u6574\u4e2a\u5de5\u5177\u7684\u5730\u57fa\u3002\u4e3e\u4e09\u4e2a\u4f8b\u5b50\uff1a<\/p>\n\n\n\n

    \u4e8b\u4ef6<\/th>\u4e8b\u4ef6\u67e5\u770b\u5668\u91cc\u7684\u7ea7\u522b<\/th>\u5b9e\u9645\u542b\u4e49<\/th>\u5de5\u5177\u7684\u5b9a\u7ea7<\/th><\/tr><\/thead>
    Ntfs \/ 98<\/code><\/td>\u4fe1\u606f<\/td>“\u5377\u8fd0\u884c\u72b6\u51b5\u826f\u597d\uff0c\u65e0\u9700\u6267\u884c\u4efb\u4f55\u64cd\u4f5c”<\/td>\u5ffd\u7565\uff08\u8fd9\u662f\u597d\u6d88\u606f\uff09<\/td><\/tr>
    DistributedCOM \/ 10016<\/code><\/td>\u8b66\u544a<\/td>\u5fae\u8f6f\u8bf4\u53ef\u5ffd\u7565<\/td>\u566a\u58f0\uff0c\u4e0d\u6263\u5206<\/td><\/tr>
    disk \/ 7<\/code><\/td>\u9519\u8bef<\/td>\u78c1\u76d8\u6709\u574f\u5757<\/td>\u4e25\u91cd\uff0c\u6700\u9ad8\u4f18\u5148\u7ea7<\/strong><\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

    \u8fd9\u4e09\u6761\u5728\u4e8b\u4ef6\u67e5\u770b\u5668\u91cc\u957f\u5f97\u5dee\u4e0d\u591a\uff0c\u4f46\u4e25\u91cd\u7a0b\u5ea6\u5929\u5dee\u5730\u522b\u3002\u5de5\u5177\u5185\u90e8\u7ed9\u6bcf\u6761\u77e5\u8bc6\u5e93\u6761\u76ee\u6253\u4e86 ig<\/code>\uff08\u53ef\u5ffd\u7565\uff09\u6807\u8bb0\u2014\u2014\u88ab\u6807\u8bb0\u4e3a\u53ef\u5ffd\u7565\u7684\u4e8b\u4ef6\uff0c\u65e0\u8bba\u5237\u51fa\u591a\u5c11\u6761\u90fd\u4e0d\u4f1a\u5347\u7ea7\u3001\u4e0d\u4f1a\u6263\u5065\u5eb7\u5206<\/strong>\uff0c\u53ea\u5728\u62a5\u544a\u672b\u5c3e\u5355\u72ec\u5217\u4e00\u4e2a”\u53ef\u5ffd\u7565\u7684\u65e5\u5fd7\u566a\u58f0”\u5206\u533a\u3002<\/p>\n\n\n\n

    \u8fd9\u6761\u8bbe\u8ba1\u6709\u4e2a\u5f88\u5b9e\u9645\u7684\u7406\u7531\uff1a\u4e3a\u4e86\u6d88\u706d\u65e5\u5fd7\u91cc\u7684\u7ea2\u53c9\u53bb\u6539\u7cfb\u7edf\u8bbe\u7f6e\uff0c\u662f\u8fd0\u7ef4\u91cc\u6700\u5e38\u89c1\u7684\u65e0\u7528\u529f\uff0c\u5de5\u5177\u4e0d\u8be5\u5e26\u7740\u7528\u6237\u5f80\u5751\u91cc\u8d70\u3002<\/p>\n\n\n\n

    2.2 \u5fc5\u987b\u6309”\u6765\u6e90 + \u4e8b\u4ef6 ID”\u4e24\u4e2a\u5b57\u6bb5\u4e00\u8d77\u5339\u914d<\/h3>\n\n\n\n

    \u8fd9\u662f\u5f00\u53d1\u4e2d\u6700\u65e9\u649e\u5230\u7684\u5751\u3002\u540c\u4e00\u53f0\u673a\u5668\u4e0a\uff1a<\/p>\n\n\n\n

     Hyper-V-Hypervisor \/ 129  \u2192  \"\u865a\u62df\u673a\u76d1\u63a7\u7a0b\u5e8f\u5df2\u521d\u59cb\u5316 I\/O \u91cd\u65b0\u6620\u5c04\"\uff08\u4fe1\u606f\u7ea7\uff0c\u5b8c\u5168\u6b63\u5e38\uff09
     storahci \/ 129            \u2192  \"\u5c06\u8bbe\u5907\u590d\u4f4d\"\uff08\u786c\u76d8\u5373\u5c06\u51fa\u95ee\u9898\u7684\u5f3a\u4fe1\u53f7\uff09<\/pre>\n\n\n\n
    \u53ea\u6309\u4e8b\u4ef6 ID \u8ba4\uff0c\u4f1a\u628a\u597d\u4e8b\u62a5\u6210\u6545\u969c\u3002<\/strong> \u7f51\u4e0a\u5f88\u591a”\u4e8b\u4ef6 ID \u5927\u5168”\u5c31\u662f\u8fd9\u4e48\u9519\u7684\u3002\u6240\u4ee5\u77e5\u8bc6\u5e93\u7684\u4e3b\u952e\u662f (\u6765\u6e90, \u4e8b\u4ef6ID)<\/code>\uff0c\u6765\u6e90\u5339\u914d\u505a\u4e86\u4e00\u6863\u653e\u5bbd\uff08Microsoft-Windows-Ntfs<\/code> \u80fd\u5339\u914d Ntfs<\/code>\uff09\uff0c\u4f46\u7edd\u4e0d\u8de8 ID \u731c\u3002<\/p>\n\n\n\n
    2.3 \u805a\u5408\u4e0e\u5173\u8054<\/h3>\n\n\n\n
    50 \u6761 7031<\/code> \u4e0d\u662f 50 \u4e2a\u95ee\u9898\uff0c\u662f 1 \u4e2a\u95ee\u9898\u3002\u5de5\u5177\u4f1a\uff1a<\/p>\n\n\n\n
      \n
    • \u628a Service Control Manager 7031\/7034<\/code> \u6309\u670d\u52a1\u540d<\/strong>\u5f52\u7c7b\uff0c\u544a\u8bc9\u4f60”\u54ea 3 \u4e2a\u670d\u52a1\u5d29\u4e86\uff0c\u5404\u5d29\u4e86\u51e0\u6b21”<\/li>\n\n\n\n
    • \u628a Application Error 1000<\/code> \u6309\u51fa\u9519\u6a21\u5757<\/strong>\u5f52\u7c7b\u2014\u2014\u8fd9\u624d\u662f\u5b9a\u4f4d\u5e94\u7528\u5d29\u6e83\u7684\u5173\u952e\u5b57\u6bb5<\/li>\n\n\n\n
    • \u628a Kernel-Power 41<\/code> + BugCheck 1001<\/code> + EventLog 6008<\/code> + volmgr 161<\/code> \u8bc6\u522b\u6210\u540c\u4e00\u6b21\u84dd\u5c4f\u7684\u56db\u4e2a\u4fa7\u9762<\/strong>\uff0c\u5408\u5e76\u6210\u4e00\u6761\u7ed3\u8bba<\/li>\n<\/ul>\n\n\n\n
      \u8fd8\u6709\u4e00\u6761\u5bb9\u6613\u88ab\u5ffd\u7565\u7684\u7ec6\u8282\uff1a7023<\/code> \u4e8b\u4ef6\u5982\u679c\u9519\u8bef\u6587\u672c\u662f”\u7cfb\u7edf\u6b63\u5728\u5173\u673a”\uff0c\u90a3\u662f\u5173\u673a\u65f6\u7684\u6b63\u5e38\u6536\u5c3e\uff0c\u5de5\u5177\u4f1a\u76f4\u63a5\u8df3\u8fc7\u5b83\uff0c\u4e0d\u8ba1\u5165\u670d\u52a1\u5f02\u5e38\u3002<\/p>\n\n\n\n
      2.4 \u5065\u5eb7\u5206<\/h3>\n\n\n\n
      100 \u5206\u5236\uff0c\u6309\u4e25\u91cd\u5ea6\u6263\u5206\uff0c\u6bcf\u6863\u6709\u5c01\u9876\uff08\u907f\u514d\u4e00\u7c7b\u95ee\u9898\u628a\u5206\u6570\u6263\u7a7f\uff09\u3002\u51fa\u73b0\u6b21\u6570\u5c11\u4e8e 5 \u6b21\u7684\u95ee\u9898\u6309\u534a\u4ef7\u6263\u2014\u2014\u5426\u5219”\u4e00\u6b21 SxS \u62a5\u9519”\u548c”\u4e24\u5468\u5185 166 \u6b21\u670d\u52a1\u542f\u52a8\u5931\u8d25”\u6263\u4e00\u6837\u7684\u5206\uff0c\u5206\u6570\u5c31\u5931\u53bb\u610f\u4e49\u4e86\u3002\u4f46\u4e25\u91cd\u7ea7\u522b\u4e0d\u6253\u6298\uff1a\u4e00\u6b21\u84dd\u5c4f\u5c31\u662f\u4e00\u6b21\u84dd\u5c4f<\/strong>\u3002<\/p>\n\n\n\n
      \u90a3\u53f0\u6837\u672c\u673a\u5668\u6700\u7ec8\u5f97\u5206 43 \u5206\uff08\u95ee\u9898\u8f83\u591a\uff09<\/strong>\uff0c\u6263\u5206\u660e\u7ec6\uff1a<\/p>\n\n\n\n
       -18  \u68c0\u6d4b\u5230 4 \u6b21\u5f02\u5e38\u91cd\u542f\uff08\u65e0\u84dd\u5c4f\u8f6c\u50a8\uff09
        -8  \u6709 7 \u4e2a\u670d\u52a1\u542f\u52a8\u5931\u8d25\u6216\u8d85\u65f6\uff08\u5171 166 \u6b21\uff09
        -8  \u5e94\u7528\u7a0b\u5e8f\u5d29\u6e83 44 \u6b21
        -8  \u6709 1 \u4e2a\u670d\u52a1\u610f\u5916\u7ec8\u6b62\uff08\u5171 32 \u6b21\uff09
        -4  \u84dd\u5c4f\u8f6c\u50a8\u6587\u4ef6\u5199\u5165\u5931\u8d25
        ...<\/pre>\n\n\n\n
      \n\n\n\n
      \u4e09\u3001\u4e00\u4e2a\u771f\u5b9e\u6848\u4f8b\uff1a\u67e5\u51fa\u4e86\u56e0\u679c\u94fe<\/h2>\n\n\n\n
      \u6837\u672c\u673a\u5668\u4e0a\u6709 4 \u6761 volmgr 161\u300c\u8f6c\u50a8\u6587\u4ef6\u521b\u5efa\u5931\u8d25\u300d<\/code>\u3002\u5de5\u5177\u53bb\u8bfb\u4e86\u8f6c\u50a8\u914d\u7f6e\uff0c\u53d1\u73b0\uff1a<\/p>\n\n\n\n
       \u8f6c\u50a8\u7c7b\u578b      : \u5185\u6838\u5185\u5b58\u8f6c\u50a8
       \u5c0f\u8f6c\u50a8\u76ee\u5f55    : D:\\Minidump
       \u9875\u9762\u6587\u4ef6      : D:\\pagefile.sys 16384MB
       \u7cfb\u7edf\u76d8 C:     : \u6ca1\u6709\u9875\u9762\u6587\u4ef6<\/pre>\n\n\n\n
      \u4e8e\u662f\u7ed9\u51fa\u4e86\u8fd9\u6761\u7ed3\u8bba\uff1a<\/p>\n\n\n\n
      \n
      \u9875\u9762\u6587\u4ef6\u4e0d\u5728\u7cfb\u7edf\u76d8 C: \u4e0a\u3002<\/strong> \u5185\u6838\u8f6c\u50a8\u5fc5\u987b\u5148\u5199\u5165\u7cfb\u7edf\u76d8\u7684\u9875\u9762\u6587\u4ef6\uff08\u5d29\u6e83\u65f6\u5199\u8fdb\u53bb\uff0c\u91cd\u542f\u540e\u518d\u642c\u6210 MEMORY.DMP\uff09\uff0c\u5426\u5219\u6bcf\u6b21\u84dd\u5c4f\u90fd\u4f1a\u5199\u5931\u8d25\u2014\u2014\u5bf9\u5e94 System \u65e5\u5fd7\u91cc\u7684 volmgr 161\u3002<\/p>\n<\/blockquote>\n\n\n\n
      \u56e0\u679c\u94fe\u5b8c\u6574\u95ed\u5408\u4e86<\/strong>\uff1a\u6709\u4eba\u628a\u9875\u9762\u6587\u4ef6\u6574\u4e2a\u632a\u5230\u4e86 D \u76d8 \u2192 \u7cfb\u7edf\u76d8\u4e0a\u4e00\u4e2a\u90fd\u4e0d\u7559 \u2192 \u5185\u6838\u8f6c\u50a8\u7269\u7406\u4e0a\u65e0\u6cd5\u5199\u51fa \u2192 4 \u6b21\u5f02\u5e38\u91cd\u542f\u4e00\u4efd\u8bc1\u636e\u90fd\u6ca1\u7559\u4e0b \u2192 \u84dd\u5c4f\u539f\u56e0\u6c38\u8fdc\u67e5\u4e0d\u51fa\u6765\u3002<\/p>\n\n\n\n
      \u800c Windows \u5bf9\u6b64\u6ca1\u6709\u4efb\u4f55\u63d0\u793a<\/strong>\u3002\u4f60\u53ea\u4f1a\u5728\u65e5\u5fd7\u6df1\u5904\u770b\u5230\u4e00\u6761”\u8f6c\u50a8\u6587\u4ef6\u521b\u5efa\u5931\u8d25”\uff0c\u5982\u679c\u4e0d\u77e5\u9053\u8fd9\u4e2a\u673a\u5236\uff0c\u6839\u672c\u8054\u60f3\u4e0d\u5230\u662f\u9875\u9762\u6587\u4ef6\u4f4d\u7f6e\u7684\u95ee\u9898\u3002<\/p>\n\n\n\n
      \u8fd9\u5c31\u662f\u6211\u60f3\u505a\u8fd9\u4e2a\u5de5\u5177\u7684\u539f\u56e0\uff1a\u8fd9\u7c7b\u77e5\u8bc6\u4e0d\u96be\uff0c\u4f46\u5206\u6563\u5728\u51e0\u5341\u7bc7\u82f1\u6587\u6587\u6863\u548c\u8bba\u575b\u5e16\u5b50\u91cc\uff0c\u666e\u901a\u4eba\u51d1\u4e0d\u9f50\u3002<\/strong><\/p>\n\n\n\n
      \n\n\n\n
      \u56db\u3001\u529f\u80fd<\/h2>\n\n\n\n
      \u5de5\u5177\u6709\u516d\u4e2a\u9875\u9762\u3002<\/p>\n\n\n\n
      \u4e00\u952e\u4f53\u68c0<\/h3>\n\n\n\n
      \u70b9\u4e00\u4e0b\uff0c30~40 \u79d2\u51fa\u7ed3\u679c\uff1a\u534a\u73af\u8868\u76d8\u663e\u793a\u5065\u5eb7\u5206\uff0c\u4e0b\u9762\u6309\u4e25\u91cd\u5ea6\u5217\u51fa\u6240\u6709\u7ed3\u8bba\uff0c\u6bcf\u6761\u90fd\u80fd\u5c55\u5f00\u770b”\u73b0\u8c61 \/ \u53ef\u80fd\u539f\u56e0 \/ \u5f71\u54cd \/ \u5efa\u8bae\u5904\u7f6e”\u3002<\/p>\n\n\n\n
      \u91c7\u96c6\u8303\u56f4\u662f Windows \u56db\u5927\u65e5\u5fd7 + 26 \u4e2a\u7cbe\u9009\u7684”\u5e94\u7528\u7a0b\u5e8f\u548c\u670d\u52a1\u65e5\u5fd7”\u901a\u9053<\/strong>\uff08\u4efb\u52a1\u8ba1\u5212\u3001\u542f\u52a8\u6027\u80fd\u3001NTFS\u3001\u5b58\u50a8\u3001\u66f4\u65b0\u3001\u7ec4\u7b56\u7565\u3001\u65e0\u7ebf\u3001\u6253\u5370\u3001\u8fdc\u7a0b\u684c\u9762\u7b49\uff09\u3002\u4e0d\u662f\u5168\u91cf\u626b 1000 \u591a\u4e2a\u901a\u9053\u2014\u2014\u90a3\u6837\u65e2\u6162\u53c8\u5168\u662f\u566a\u58f0\u3002<\/p>\n\n\n\n
      \u53e6\u5916\u5355\u72ec\u635e\u4e00\u904d”\u7ea7\u522b\u4e0d\u662f\u9519\u8bef\u3001\u4f46\u5bf9\u5b9a\u4f4d\u95ee\u9898\u6781\u5176\u5173\u952e”\u7684\u4e8b\u4ef6\uff0c\u6bd4\u5982 Kernel-Power 41<\/code>\u3001User32 1074<\/code>\uff08\u8c01\u53d1\u8d77\u7684\u5173\u673a\uff09\u3001EventLog 6005\/6006<\/code>\uff08\u5f00\u5173\u673a\u6807\u8bb0\uff09\u3002\u8fd9\u4e9b\u5728\u6309\u7ea7\u522b\u7b5b\u9009\u65f6\u5168\u90e8\u4f1a\u88ab\u6f0f\u6389\u3002<\/p>\n\n\n\n
      \u4e8b\u4ef6\u6d4f\u89c8<\/h3>\n\n\n\n
      \u6309\u4e8b\u4ef6\u67e5\u770b\u5668\u7684\u4e60\u60ef\u505a\u7684\u4e24\u7ea7\u901a\u9053\u6811\uff08Windows \u65e5\u5fd7 \/ \u5e94\u7528\u7a0b\u5e8f\u548c\u670d\u52a1\u65e5\u5fd7\uff09\u3002\u53ef\u4ee5\u6309\u7ea7\u522b\u3001\u65f6\u95f4\u8303\u56f4\u3001\u5173\u952e\u8bcd\u7b5b\u9009\uff0c\u53cc\u51fb\u770b\u5b8c\u6574\u63cf\u8ff0\u548c\u539f\u59cb XML\u3002<\/p>\n\n\n\n
      \u6bcf\u6761\u4e8b\u4ef6\u4e0b\u9762\u76f4\u63a5\u6302\u77e5\u8bc6\u5e93\u89e3\u8bfb<\/strong>\u2014\u2014\u9009\u4e2d\u4e00\u6761 7009<\/code>\uff0c\u53f3\u4fa7\u5c31\u544a\u8bc9\u4f60\u8fd9\u662f”\u7b49\u5f85\u670d\u52a1\u8fde\u63a5\u8d85\u65f6\uff0830000 \u6beb\u79d2\uff09”\uff0c\u5e38\u89c1\u539f\u56e0\u662f\u4ec0\u4e48\uff0c\u8981\u4e0d\u8981\u7ba1\u3002<\/p>\n\n\n\n
      \u652f\u6301\u5bfc\u5165 .evtx<\/code> \u6587\u4ef6\u79bb\u7ebf\u5206\u6790\uff08\u540c\u4e8b\u53d1\u6765\u7684\u65e5\u5fd7\u3001\u4ece\u6545\u969c\u673a\u5bfc\u51fa\u7684\u65e5\u5fd7\u90fd\u80fd\u76f4\u63a5\u770b\uff09\uff0c\u4e5f\u652f\u6301\u628a\u4efb\u610f\u901a\u9053\u5bfc\u51fa\u6210 .evtx<\/code> \u5f52\u6863\u3002<\/p>\n\n\n\n
      \u8bca\u65ad\u4e0e\u4fee\u590d<\/h3>\n\n\n\n
      \u7ed3\u8bba + \u5904\u7f6e\u65b9\u6848\u3002\u6bcf\u6761\u7ed3\u8bba\u5173\u8054\u5bf9\u5e94\u7684\u4e00\u952e\u65b9\u6848\uff0c\u4e5f\u53ef\u4ee5\u53ea\u770b\u624b\u52a8\u6b65\u9aa4\u81ea\u5df1\u52a8\u624b\u3002<\/p>\n\n\n\n
      \u84dd\u5c4f\u5206\u6790<\/h3>\n\n\n\n
        \n
      • \u68c0\u67e5\u5e76\u4e00\u952e\u4fee\u590d\u8f6c\u50a8\u914d\u7f6e<\/li>\n\n\n\n
      • \u4e0d\u88c5 WinDbg \u76f4\u63a5\u89e3\u6790 minidump<\/strong>\uff1aWindows \u5185\u6838\u8f6c\u50a8\u6587\u4ef6\u5f00\u5934\u662f DUMP_HEADER64<\/code> \u7ed3\u6784\uff0c\u56fa\u5b9a\u504f\u79fb\u4e0a\u5c31\u653e\u7740\u505c\u6b62\u7801\u548c\u56db\u4e2a\u53c2\u6570<\/li>\n<\/ul>\n\n\n\n
         0x00  \u7b7e\u540d 'PAGE'
         0x04  'DU64'\uff0864 \u4f4d\uff09
         0x38  BugCheckCode           \u2190 \u505c\u6b62\u7801\u5728\u8fd9
         0x40\/0x48\/0x50\/0x58          \u2190 \u56db\u4e2a\u53c2\u6570
         0xF98 DumpType<\/pre>\n\n\n\n
          \n
        • \u626b\u63cf\u8f6c\u50a8\u4f53\u91cc\u7684 .sys<\/code> \u6587\u4ef6\u540d\uff0c\u7528\u4e00\u4efd\u5fae\u8f6f\u81ea\u5e26\u9a71\u52a8\u767d\u540d\u5355\u8fc7\u6ee4\uff0c\u628a\u7b2c\u4e09\u65b9\u9a71\u52a8\u6311\u51fa\u6765<\/strong>\u5e76\u6807\u6ce8\u5f52\u5c5e\uff08klif.sys<\/code> \u2192 \u5361\u5df4\u65af\u57fa\uff0cnvlddmkm.sys<\/code> \u2192 NVIDIA \u663e\u5361\u9a71\u52a8\uff0cvboxdrv.sys<\/code> \u2192 VirtualBox\uff09<\/li>\n\n\n\n
        • \u5d29\u6e83\u65f6\u95f4\u7ebf<\/strong>\uff1a\u5217\u51fa\u6bcf\u6b21\u5d29\u6e83\u524d 10 \u5206\u949f\u5185\u7684\u6240\u6709\u4e8b\u4ef6\u2014\u2014\u5d29\u6e83\u524d\u6700\u540e\u5199\u65e5\u5fd7\u7684\u7ec4\u4ef6\uff0c\u5f80\u5f80\u5c31\u662f\u5143\u51f6<\/li>\n<\/ul>\n\n\n\n
          \u8fd9\u4e0d\u80fd\u66ff\u4ee3 WinDbg \u7684\u6808\u56de\u6eaf\uff0c\u4f46\u8db3\u591f\u56de\u7b54\u7528\u6237\u6700\u5173\u5fc3\u7684\u4e24\u4e2a\u95ee\u9898\uff1a\u4ec0\u4e48\u7801\u3001\u54ea\u4e9b\u7b2c\u4e09\u65b9\u9a71\u52a8\u5728\u573a<\/strong>\u3002<\/p>\n\n\n\n
          \u670d\u52a1\u4e0e\u8ba1\u5212\u4efb\u52a1<\/h3>\n\n\n\n
          \u670d\u52a1\u5217\u8868\u5e26”\u53ef\u6267\u884c\u6587\u4ef6\u662f\u5426\u8fd8\u5b58\u5728”\u5224\u65ad\uff0c\u80fd\u4e00\u773c\u627e\u51fa\u8f6f\u4ef6\u5378\u8f7d\u540e\u6b8b\u7559\u7684\u5e7d\u7075\u670d\u52a1\u2014\u2014\u90a3\u662f 7000\/7009<\/code> \u62a5\u9519\u6700\u5e38\u89c1\u7684\u6765\u6e90\u3002\u53ef\u4ee5\u76f4\u63a5\u6539\u542f\u52a8\u7c7b\u578b\u3001\u542f\u505c\u670d\u52a1\u3002<\/p>\n\n\n\n
          \u8ba1\u5212\u4efb\u52a1\u5217\u8868\u628a\u4e0a\u6b21\u8fd0\u884c\u7ed3\u679c\u7ffb\u8bd1\u6210\u4e2d\u6587<\/strong>\uff1a<\/p>\n\n\n\n
           0x80070569  \u2192  \u767b\u5f55\u5931\u8d25\uff1a\u7528\u6237\u672a\u88ab\u6388\u4e88\u8bf7\u6c42\u7684\u767b\u5f55\u7c7b\u578b
           0x8007010B  \u2192  \u76ee\u5f55\u540d\u79f0\u65e0\u6548\uff08\u300c\u8d77\u59cb\u4e8e\u300d\u6ca1\u586b\uff09
           0x80040154  \u2192  \u7c7b\u672a\u6ce8\u518c\uff08COM \u7ec4\u4ef6\u7f3a\u5931\u6216\u672a\u6ce8\u518c\uff09
           0x41303     \u2192  \u4efb\u52a1\u5c1a\u672a\u8fd0\u884c\u8fc7\uff08\u8fd9\u662f\u6b63\u5e38\u72b6\u6001\uff0c\u4e0d\u662f\u5931\u8d25\uff09<\/pre>\n\n\n\n
          \u8fd8\u6709\u5f00\u673a\u8017\u65f6\u8d8b\u52bf\u3002\u8fd9\u91cc\u6709\u4e2a\u5751\uff1a\u5b98\u65b9\u7684 Diagnostics-Performance\/Operational<\/code> \u901a\u9053\u5728\u8f83\u65b0\u7684 Windows 11 \u4e0a\u5df2\u7ecf\u4e0d\u5b58\u5728\u4e86<\/strong>\uff08\u6837\u672c\u673a 26220 \u7248\u672c\u4e0a\u67e5\u4e0d\u5230\uff09\uff0c\u6240\u4ee5\u505a\u4e86\u9000\u8def\u2014\u2014\u7528 Kernel-General 12<\/code>\uff08\u7cfb\u7edf\u542f\u52a8\uff09\u5230\u8be5\u6b21\u542f\u52a8\u540e\u7b2c\u4e00\u6761 Winlogon \u901a\u77e5\u7684\u65f6\u95f4\u5dee\u505a\u4f30\u7b97\uff0c\u5e76\u660e\u786e\u6807\u6ce8”\u4f30\u7b97”\uff0c\u4e0d\u5192\u5145\u7cbe\u786e\u503c\u3002<\/p>\n\n\n\n
          \u77e5\u8bc6\u5e93<\/h3>\n\n\n\n
          \u53ef\u5168\u6587\u641c\u7d22\u3002\u8f93\u5165 7009<\/code> \u76f4\u63a5\u8df3\u5230\u5bf9\u5e94\u4e8b\u4ef6\uff0c\u8f93\u5165 0x7E<\/code> \u8df3\u5230\u84dd\u5c4f\u505c\u6b62\u7801\uff0c\u8f93\u5165”\u8ba1\u5212\u4efb\u52a1”\u5217\u51fa\u6240\u6709\u76f8\u5173\u6761\u76ee\u3002<\/p>\n\n\n\n
          \u5185\u5bb9<\/th>\u6570\u91cf<\/th><\/tr><\/thead>
          \u4e8b\u4ef6 ID \u6761\u76ee<\/td>100<\/td><\/tr>
          \u84dd\u5c4f\u505c\u6b62\u7801<\/td>45<\/td><\/tr>
          \u5904\u7f6e\u65b9\u6848<\/td>23<\/td><\/tr>
          \u4e13\u9898\u6587\u7ae0<\/td>10<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
          \u4e13\u9898\u5305\u62ec\uff1a\u770b\u61c2 Windows \u4e8b\u4ef6\u65e5\u5fd7\uff08\u5fc5\u8bfb\u57fa\u7840\uff09\u3001\u84dd\u5c4f\u5b8c\u6574\u6392\u67e5\u6d41\u7a0b\u3001\u5f00\u673a\u6162\/\u5173\u673a\u6162\u3001\u7cfb\u7edf\u5361\u987f\u3001\u670d\u52a1\u95ee\u9898\u901f\u67e5\u3001\u8ba1\u5212\u4efb\u52a1\u5931\u8d25\u901f\u67e5\u3001\u53ef\u4ee5\u653e\u5fc3\u5ffd\u7565\u7684\u65e5\u5fd7\u566a\u58f0\u6e05\u5355<\/strong>\u3001\u5e38\u89c1\u9519\u8bef\u7801\u901f\u67e5\u3001\u673a\u5668\u53ef\u80fd\u88ab\u5165\u4fb5\u7684\u8ff9\u8c61\u3001\u6708\u5ea6\u5de1\u68c0\u6e05\u5355\u3002<\/p>\n\n\n\n
          \u6bcf\u4e2a\u84dd\u5c4f\u505c\u6b62\u7801\u7ed9\u56db\u6837\u4e1c\u897f\uff1a\u8fd9\u7801\u5728\u8bf4\u4ec0\u4e48\u3001\u6700\u53ef\u80fd\u7684\u539f\u56e0\uff08\u6309\u5b9e\u9645\u9047\u5230\u7684\u6982\u7387\u6392\u5e8f\uff0c\u4e0d\u6309\u5fae\u8f6f\u6587\u6863\u7684\u987a\u5e8f\uff09<\/strong>\u3001\u56db\u4e2a\u53c2\u6570\u600e\u4e48\u8bfb\u3001\u4e00\u6b65\u6b65\u600e\u4e48\u529e\u3002<\/p>\n\n\n\n
          \n\n\n\n
          \u4e94\u3001”\u4e00\u952e\u4fee\u590d”\u7684\u5b89\u5168\u8fb9\u754c<\/h2>\n\n\n\n
          \u8fd9\u662f\u6211\u5728\u8fd9\u4e2a\u9879\u76ee\u4e0a\u82b1\u5fc3\u601d\u6700\u591a\u7684\u5730\u65b9\u3002\u4e00\u4e2a\u80fd\u6539\u7cfb\u7edf\u7684\u5de5\u5177\uff0c\u6700\u6015\u7684\u4e0d\u662f\u529f\u80fd\u5c11\uff0c\u662f\u4e71\u52a8\u624b<\/strong>\u3002<\/p>\n\n\n\n
          \u89c4\u5219\u662f\u6b7b\u7684\uff1a<\/p>\n\n\n\n
          1. \u4e09\u7ea7\u98ce\u9669\uff0c\u9ad8\u98ce\u9669\u7684\u6839\u672c\u4e0d\u7ed9\u4e00\u952e\u6309\u94ae\u3002<\/strong><\/p>\n\n\n\n
          23 \u5957\u65b9\u6848\u91cc\uff0c12 \u5957 safe<\/code>\uff08\u53ea\u8bfb\u8bca\u65ad\uff09\u300110 \u5957 caution<\/code>\uff08\u4f1a\u6539\u7cfb\u7edf\u72b6\u6001\uff09\u30011 \u5957 danger<\/code>\u3002danger<\/code> \u90a3\u5957\u662f DCOM 10016 \u6743\u9650\u4fee\u6539\u2014\u2014\u6d89\u53ca\u6539\u6ce8\u518c\u8868\u6240\u6709\u8005\u548c COM \u6743\u9650\uff0c\u5de5\u5177\u53ea\u663e\u793a\u624b\u52a8\u6b65\u9aa4\uff0c\u7edd\u4e0d\u4ee3\u52b3<\/strong>\uff0c\u800c\u4e14\u5f00\u5934\u7b2c\u4e00\u53e5\u5c31\u662f”\u63a8\u8350\u505a\u6cd5\u662f\u76f4\u63a5\u5ffd\u7565\u5b83”\u3002<\/p>\n\n\n\n
          2. \u9ed8\u8ba4\u9884\u6f14\u3002<\/strong><\/p>\n\n\n\n
          \u52fe\u7740”\u9884\u6f14”\u65f6\u53ea\u6253\u5370\u5c06\u8981\u6267\u884c\u7684\u5b8c\u6574\u547d\u4ee4\u884c\uff0c\u4e0d\u505a\u4efb\u4f55\u5b9e\u9645\u6539\u52a8\u3002\u7528\u6237\u770b\u660e\u767d\u4e86\u518d\u53d6\u6d88\u52fe\u9009\u6267\u884c\u3002<\/p>\n\n\n\n
          3. \u6267\u884c\u524d\u644a\u5f00\u547d\u4ee4\u3002<\/strong><\/p>\n\n\n\n
          \u4e0d\u5b58\u5728”\u70b9\u4e00\u4e0b\uff0c\u7136\u540e\u4e0d\u77e5\u9053\u5b83\u5e72\u4e86\u4ec0\u4e48”\u3002\u6bcf\u4e00\u6b65\u6267\u884c\u524d\uff0c\u5b8c\u6574\u547d\u4ee4\u884c\u90fd\u6253\u5728\u8f93\u51fa\u533a\u91cc\u3002<\/p>\n\n\n\n
          4. \u8c28\u614e\u7ea7\u5efa\u8bae\u5148\u5efa\u7cfb\u7edf\u8fd8\u539f\u70b9\u3002<\/strong><\/p>\n\n\n\n
          \u754c\u9762\u4e0a\u6709\u52fe\u9009\u6846\uff0c\u5de5\u5177\u4f1a\u8c03 Checkpoint-Computer<\/code>\u3002\u5efa\u4e0d\u6210\uff08\u7cfb\u7edf\u4fdd\u62a4\u6ca1\u5f00\u300124 \u5c0f\u65f6\u5185\u5df2\u5efa\u8fc7\uff09\u4f1a\u5982\u5b9e\u544a\u8bc9\u4f60\uff0c\u4e0d\u5047\u88c5\u6210\u529f\u3002<\/p>\n\n\n\n
          5. \u5168\u7a0b\u7559\u75d5\u3002<\/strong><\/p>\n\n\n\n
          \u6240\u6709\u5b9e\u9645\u6267\u884c\u8fc7\u7684\u547d\u4ee4\u5199\u8fdb %APPDATA%\\LogMedic\\actions.log<\/code>\u3002\u51fa\u4e86\u95ee\u9898\u80fd\u56de\u6eaf”\u5de5\u5177\u5230\u5e95\u52a8\u4e86\u4ec0\u4e48”\u3002<\/p>\n\n\n\n
          \u8fd8\u6709\u4e00\u6761\u5224\u65ad\u4e0a\u7684\u514b\u5236\uff1a\u5de5\u5177\u4e0d\u4f1a<\/strong>\u56e0\u4e3a”\u81ea\u52a8\u542f\u52a8\u7684\u670d\u52a1\u6ca1\u5728\u8fd0\u884c”\u5c31\u5efa\u8bae\u4f60\u7981\u7528\u5b83\u2014\u2014\u9664\u975e\u5b83\u7684\u53ef\u6267\u884c\u6587\u4ef6\u786e\u5b9e\u5df2\u7ecf\u4e0d\u5b58\u5728\u4e86\u3002\u56e0\u4e3a\u89e6\u53d1\u542f\u52a8\u578b\u670d\u52a1\u505c\u7740\u662f\u5b8c\u5168\u6b63\u5e38\u7684\u3002<\/p>\n\n\n\n
          \n\n\n\n
          \u516d\u3001\u6280\u672f\u5b9e\u73b0<\/h2>\n\n\n\n
          6.1 \u6280\u672f\u6808<\/h3>\n\n\n\n
          \u9879<\/th>\u9009\u62e9<\/th><\/tr><\/thead>
          \u8bed\u8a00<\/td>Python 3.8+<\/td><\/tr>
          \u754c\u9762<\/td>tkinter \/ ttk\uff08\u6807\u51c6\u5e93\uff09<\/td><\/tr>
          \u65e5\u5fd7\u91c7\u96c6<\/td>PowerShell Get-WinEvent<\/code><\/td><\/tr>
          \u6253\u5305<\/td>PyInstaller\uff0c\u5355\u6587\u4ef6 exe<\/td><\/tr>
          \u7b2c\u4e09\u65b9\u4f9d\u8d56<\/td>\u96f6<\/strong><\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
          \u4ee3\u7801\u7ea6 10000 \u884c<\/strong>\uff0c\u6253\u5305\u540e exe \u7ea6 9.5 MB\u3002<\/p>\n\n\n\n
          \u65e5\u5fd7\u91c7\u96c6\u8d70 PowerShell \u800c\u4e0d\u662f\u76f4\u63a5\u8c03 Windows API\uff0c\u662f\u56e0\u4e3a\u53ea\u6709 Get-WinEvent<\/code> \u80fd\u628a\u4e8b\u4ef6\u6e32\u67d3\u6210\u672c\u5730\u8bed\u8a00\u7684\u53ef\u8bfb\u63cf\u8ff0<\/strong>\u3002wevtutil<\/code> \u5bfc\u51fa\u7684 XML \u91cc\u53ea\u6709\u53c2\u6570\uff0c\u6ca1\u6709\u6e32\u67d3\u540e\u7684\u6587\u672c\u2014\u2014\u800c\u63cf\u8ff0\u6587\u672c\u6070\u6070\u662f\u6700\u6709\u4ef7\u503c\u7684\u90e8\u5206\uff08\u9519\u8bef\u7801\u3001\u6587\u4ef6\u540d\u3001\u6a21\u5757\u540d\u3001\u670d\u52a1\u540d\u90fd\u5728\u91cc\u9762\uff09\u3002<\/p>\n\n\n\n
          \u77e5\u8bc6\u5e93\u5168\u90e8\u662f .py<\/code> \u6a21\u5757\uff0c\u4e0d\u662f JSON \u6570\u636e\u6587\u4ef6\u3002\u56e0\u4e3a\u5355\u6587\u4ef6 exe \u91cc\u8bfb\u6570\u636e\u6587\u4ef6\u8981\u8d70 _MEIPASS<\/code> \u53d6\u8def\u5f84\uff0c\u662f\u6253\u5305\u7ffb\u8f66\u7684\u7ecf\u5178\u6765\u6e90\u3002\u5199\u6210\u6a21\u5757\uff0cimport<\/code> \u5c31\u5b8c\u4e8b\u4e86\u3002<\/p>\n\n\n\n
          6.2 \u5f00\u53d1\u4e2d\u649e\u51fa\u6765\u7684\u4e09\u4e2a\u5751<\/h3>\n\n\n\n
          \u8fd9\u4e09\u4e2a\u90fd\u662f\u5728\u771f\u673a\u4e0a\u8dd1\u51fa\u6765\u624d\u53d1\u73b0\u7684\uff0c\u5199\u5728\u8fd9\u91cc\u7ed9\u540c\u7c7b\u9879\u76ee\u7701\u70b9\u65f6\u95f4\u3002<\/p>\n\n\n\n
          \u5751\u4e00\uff1aWindows \u4e8b\u4ef6\u65e5\u5fd7\u7684 XPath \u67e5\u8be2\u6700\u591a\u53ea\u5141\u8bb8 23 \u4e2a\u8868\u8fbe\u5f0f\u3002<\/strong><\/p>\n\n\n\n
           # System \u901a\u9053\u8981\u67e5 27 \u4e2a\u4e8b\u4ef6 ID\uff0c\u4e00\u6b21\u67e5\u4e0b\u53bb \u2014\u2014 \u8fd4\u56de 0 \u6761
           # \u52a0\u4e86 -ErrorAction SilentlyContinue \u4e4b\u540e\u8fde\u62a5\u9519\u90fd\u770b\u4e0d\u5230\uff0c\u7eaf\u9759\u9ed8\u5931\u8d25<\/pre>\n\n\n\n
          \u8d85\u9650\u540e\u6574\u6761\u67e5\u8be2\u4f5c\u5e9f\uff0c\u800c -ErrorAction SilentlyContinue<\/code>\uff08\u4e3a\u4e86\u5bb9\u5fcd”\u6ca1\u627e\u5230\u4e8b\u4ef6”\u8fd9\u79cd\u6b63\u5e38\u60c5\u51b5\uff0c\u5fc5\u987b\u52a0\uff09\u4f1a\u628a\u9519\u8bef\u541e\u6389\uff0c\u8868\u73b0\u4e3a\u9759\u9ed8\u8fd4\u56de 0 \u6761\uff0c\u6781\u96be\u6392\u67e5\u3002\u89e3\u51b3\u529e\u6cd5\u662f\u4e3b\u52a8\u5206\u5757\uff0c\u4e00\u5757\u6700\u591a 16 \u9879\uff08\u7ed9 LogName\u3001\u65f6\u95f4\u8303\u56f4\u7559\u4f59\u91cf\uff09\uff0c\u518d\u5408\u5e76\u53bb\u91cd\u3002<\/p>\n\n\n\n
          \u5751\u4e8c\uff1aPowerShell \u91cc try\/catch<\/code> \u662f\u8bed\u53e5\u4e0d\u662f\u8868\u8fbe\u5f0f\u3002<\/strong><\/p>\n\n\n\n
           # \u8fd9\u6837\u5199\u4f1a\u76f4\u63a5\u629b\u300c\u54c8\u5e0c\u6587\u672c\u4e0d\u5b8c\u6574\u300d\u7684\u89e3\u6790\u9519\u8bef\uff0c\u6574\u6bb5\u811a\u672c\u4f5c\u5e9f
           [pscustomobject]@{
             install = try { $os.InstallDate.ToString('yyyy-MM-dd') } catch { '' }
           }<\/pre>\n\n\n\n
          \u5fc5\u987b\u5148\u7b97\u6210\u53d8\u91cf\u518d\u5f15\u7528\u3002\u8fd9\u4e2a\u9519\u8bef\u7684\u6740\u4f24\u529b\u5728\u4e8e\u5b83\u662f\u89e3\u6790\u671f<\/strong>\u9519\u8bef\u2014\u2014\u4e0d\u662f\u90a3\u4e00\u4e2a\u5b57\u6bb5\u53d6\u4e0d\u5230\u503c\uff0c\u662f\u6574\u4e2a\u811a\u672c\u4e00\u884c\u90fd\u4e0d\u6267\u884c\u3002<\/p>\n\n\n\n
          \u5751\u4e09\uff1a\u670d\u52a1\u7684 PathName<\/code> \u4e0d\u80fd\u6309\u7a7a\u683c\u5207\u3002<\/strong><\/p>\n\n\n\n
           \"C:\\Program Files\\App\\svc.exe\" -k netsvcs     \u2190 \u5e26\u5f15\u53f7
           C:\\Program Files\\App\\svc.exe -k netsvcs       \u2190 \u4e0d\u5e26\u5f15\u53f7\u4f46\u542b\u7a7a\u683c
           \\SystemRoot\\System32\\drivers\\x.sys            \u2190 \u9a71\u52a8<\/pre>\n\n\n\n
          \u6309\u7a7a\u683c\u5207\u7b2c\u4e8c\u79cd\u4f1a\u5f97\u5230 C:\\Program<\/code>\uff0c\u4e8e\u662f\u6240\u6709\u88c5\u5728 Program Files \u4e0b\u7684\u670d\u52a1\u90fd\u4f1a\u88ab\u5224\u5b9a\u4e3a”\u53ef\u6267\u884c\u6587\u4ef6\u4e0d\u5b58\u5728”<\/strong>\uff0c\u5de5\u5177\u5c31\u4f1a\u5efa\u8bae\u7528\u6237\u628a\u4e00\u5927\u6279\u6b63\u5e38\u670d\u52a1\u7981\u7528\u6389\u3002\u8fd9\u79cd\u8bef\u5224\u6bd4\u4e0d\u68c0\u67e5\u66f4\u7cdf\u3002\u4fee\u6cd5\u662f\u4f18\u5148\u6309\u5f15\u53f7\u53d6\uff0c\u5176\u6b21\u6309 .exe\/.sys\/.dll<\/code> \u7ed3\u5c3e\u7684\u6b63\u5219\u53d6\u3002<\/p>\n\n\n\n
          \u987a\u5e26\u4e00\u63d0\uff1a\u4e2d\u6587 Windows \u7684\u63a7\u5236\u53f0\u4ee3\u7801\u9875\u662f GBK\uff0cPowerShell \u7684 stdout \u7ba1\u9053\u6309 GBK \u7f16\u7801\u51fa\u6765\uff0c\u4e2d\u6587\u4e8b\u4ef6\u63cf\u8ff0\u4f1a\u76f4\u63a5\u4e71\u7801\u3002\u6240\u6709\u9700\u8981\u6587\u672c\u7ed3\u679c\u7684\u5730\u65b9\uff0c\u90fd\u8ba9\u811a\u672c Out-File -Encoding utf8<\/code> \u5199\u4e34\u65f6\u6587\u4ef6\uff0cPython \u518d\u7528 utf-8-sig<\/code> \u8bfb\u56de\u6765\u3002\u800c .ps1<\/code> \u811a\u672c\u6587\u4ef6\u672c\u8eab\u5982\u679c\u4e0d\u5e26 BOM\uff0cPowerShell 5.1 \u4f1a\u6309 ANSI \u89e3\u6790\uff0c\u811a\u672c\u91cc\u7684\u4e2d\u6587\u540c\u6837\u4f1a\u70c2\u6389\u2014\u2014\u5199\u811a\u672c\u65f6\u5fc5\u987b\u7528 utf-8-sig<\/code>\u3002<\/p>\n\n\n\n
          6.3 \u81ea\u68c0<\/h3>\n\n\n\n
          selftest.py<\/code> \u6709 16 \u9879\u65e0\u754c\u9762\u81ea\u68c0\uff0c\u6253\u5305\u524d\u540e\u90fd\u4f1a\u8dd1\u3002\u5176\u4e2d\u6709\u4e00\u6761\u6bd4\u8f83\u7279\u522b\uff1a<\/p>\n\n\n\n
          \n
          \u5582\u8fdb 80 \u6761\u7eaf\u566a\u58f0\u4e8b\u4ef6\uff0c\u5065\u5eb7\u5206\u5fc5\u987b \u2265 95\u3002<\/strong><\/p>\n<\/blockquote>\n\n\n\n
          \u8fd9\u6761\u5b88\u7684\u662f\u5de5\u5177\u7684\u5224\u65ad\u529b\u5e95\u7ebf\u2014\u2014\u9632\u6b62\u54ea\u5929\u6539\u574f\u4e86\u89c4\u5219\uff0c\u8ba9\u5de5\u5177\u5f00\u59cb\u62ff\u566a\u58f0\u5413\u552c\u7528\u6237\u3002<\/p>\n\n\n\n
          \n\n\n\n
          \u4e03\u3001\u7528\u6cd5<\/h2>\n\n\n\n
          \u56fe\u5f62\u754c\u9762<\/h3>\n\n\n\n
          \u53cc\u51fb LogMedic.exe<\/code>\u3002\u6253\u5305\u65f6\u5e26\u4e86 uac_admin<\/code>\uff0c\u542f\u52a8\u4f1a\u5148\u5f39 UAC\u2014\u2014\u5efa\u8bae\u7528\u7ba1\u7406\u5458\u8eab\u4efd\u8fd0\u884c<\/strong>\uff0c\u5426\u5219\u8bfb\u5b89\u5168\u65e5\u5fd7\u3001\u89e3\u6790 minidump\u3001\u6267\u884c\u4fee\u590d\u90fd\u4f1a\u53d7\u9650\u3002<\/p>\n\n\n\n
          \u975e\u7ba1\u7406\u5458\u4e5f\u80fd\u7528\uff0c\u6807\u9898\u680f\u4f1a\u6807\u6ce8”[\u975e\u7ba1\u7406\u5458 \u00b7 \u90e8\u5206\u529f\u80fd\u53d7\u9650]”\uff0c\u53ea\u8bfb\u8bca\u65ad\u7c7b\u7684\u65b9\u6848\u7167\u5e38\u53ef\u4ee5\u8dd1\u3002<\/p>\n\n\n\n
          \u547d\u4ee4\u884c<\/h3>\n\n\n\n
          logmedic-cli.exe --report            # \u76f4\u63a5\u751f\u6210 HTML \u5de1\u68c0\u62a5\u544a
          logmedic-cli.exe --report out.html   # \u6307\u5b9a\u8f93\u51fa\u8def\u5f84
          logmedic-cli.exe --selftest          # \u8dd1\u4e00\u904d\u81ea\u68c0<\/pre>\n\n\n\n
          --report<\/code> \u8fd9\u4e2a\u6a21\u5f0f\u9002\u5408\u585e\u8fdb\u8ba1\u5212\u4efb\u52a1\u91cc\u5b9a\u671f\u8dd1\uff0c\u62a5\u544a\u5b58\u6863\u3002\u5de1\u68c0\u6700\u503c\u94b1\u7684\u7528\u6cd5\u662f\u7559\u75d5<\/strong>\u2014\u2014\u51fa\u95ee\u9898\u65f6\u4f60\u80fd\u7ffb\u51fa”\u4e0a\u4e2a\u6708\u8fd8\u597d\u597d\u7684”\u90a3\u4e2a\u65f6\u95f4\u70b9\u3002<\/p>\n\n\n\n
          \u62a5\u544a<\/h3>\n\n\n\n
          HTML \u62a5\u544a\u662f\u81ea\u5305\u542b\u7684\uff1a\u6837\u5f0f\u5185\u8054\u3001\u4e0d\u5f15\u4efb\u4f55\u5916\u90e8\u8d44\u6e90\uff0c\u53cc\u51fb\u5c31\u80fd\u770b\uff0c\u4e5f\u80fd\u76f4\u63a5\u53d1\u7ed9\u540c\u4e8b\u6216\u6253\u5370\u6210 PDF\u3002\u53e6\u6709\u7eaf\u6587\u672c\u7248\uff0c\u65b9\u4fbf\u8d34\u5230\u5de5\u5355\u6216\u804a\u5929\u91cc\u3002<\/p>\n\n\n\n
          \n\n\n\n
          \u516b\u3001\u5c40\u9650<\/h2>\n\n\n\n
          \u8bf4\u6e05\u695a\u5b83\u4e0d\u80fd\u505a\u4ec0\u4e48\uff0c\u6bd4\u5439\u5b83\u80fd\u505a\u4ec0\u4e48\u91cd\u8981\uff1a<\/p>\n\n\n\n
            \n
          • \u4e0d\u80fd\u66ff\u4ee3 WinDbg\u3002<\/strong> \u84dd\u5c4f\u5206\u6790\u53ea\u8bfb\u8f6c\u50a8\u6587\u4ef6\u5934\u548c\u9a71\u52a8\u540d\u5355\uff0c\u6ca1\u6709\u6808\u56de\u6eaf\u3002\u771f\u6b63\u590d\u6742\u7684\u84dd\u5c4f\u8fd8\u662f\u5f97\u4e0a WinDbg\u3002<\/li>\n\n\n\n
          • \u77e5\u8bc6\u5e93\u8986\u76d6\u4e0d\u4e86\u957f\u5c3e\u3002<\/strong> 100 \u6761\u4e8b\u4ef6 ID \u8986\u76d6\u7684\u662f\u9ad8\u9891\u95ee\u9898\u3002\u7b2c\u4e09\u65b9\u8f6f\u4ef6\u5199\u7684\u4e8b\u4ef6\uff08\u90a3\u53f0\u6837\u672c\u673a\u4e0a\u8fd8\u6709 10 \u7c7b\u672a\u6536\u5f55\uff09\u5de5\u5177\u4f1a\u8001\u5b9e\u8bf4”\u672a\u6536\u5f55”\uff0c\u5e76\u5efa\u8bae\u4f60\u62ff”\u6765\u6e90 + \u4e8b\u4ef6ID”\u53bb\u641c\u2014\u2014\u800c\u4e0d\u662f\u7f16\u4e00\u4e2a\u770b\u8d77\u6765\u5f88\u50cf\u7684\u89e3\u91ca\u3002<\/li>\n\n\n\n
          • \u89c4\u5219\u5339\u914d\u4e0d\u662f\u63a8\u7406\u3002<\/strong> \u5b83\u7ed9\u7684\u662f\u7ecf\u9a8c\u89c4\u5219\u7684\u7ed3\u8bba\uff0c\u6d89\u53ca\u786c\u4ef6\u66f4\u6362\u3001\u7cfb\u7edf\u91cd\u88c5\u8fd9\u7c7b\u91cd\u5927\u51b3\u5b9a\u524d\uff0c\u8bf7\u518d\u505a\u4eba\u5de5\u786e\u8ba4\u3002<\/li>\n\n\n\n
          • \u53ea\u652f\u6301 Windows\u3002<\/strong> \u4f9d\u8d56 Get-WinEvent<\/code>\uff0cWindows 10 \/ 11 \/ Server 2016+ \u4e0a\u9a8c\u8bc1\u8fc7\u3002<\/li>\n<\/ul>\n\n\n\n
            \n\n\n\n
            \u4e5d\u3001\u5199\u5728\u6700\u540e<\/h2>\n\n\n\n
            \u505a\u8fd9\u4e2a\u5de5\u5177\u7684\u8fc7\u7a0b\u4e2d\uff0c\u6211\u8d8a\u6765\u8d8a\u786e\u4fe1\u4e00\u4ef6\u4e8b\uff1a\u8fd0\u7ef4\u5de5\u5177\u7684\u4ef7\u503c\u4e0d\u5728\u4e8e\u80fd\u663e\u793a\u591a\u5c11\u4fe1\u606f\uff0c\u800c\u5728\u4e8e\u6562\u4e0d\u6562\u66ff\u7528\u6237\u628a\u4fe1\u606f\u5220\u6389\u3002<\/strong><\/p>\n\n\n\n
            \u4e8b\u4ef6\u67e5\u770b\u5668\u4ec0\u4e48\u90fd\u7ed9\u4f60\u770b\uff0c\u6240\u4ee5\u5b83\u4ec0\u4e48\u90fd\u6ca1\u544a\u8bc9\u4f60\u3002\u5fd7\u8bca LogMedic \u7684 3900 \u6761\u4e8b\u4ef6\u91cc\uff0c\u6700\u540e\u53ea\u5448\u73b0\u5341\u51e0\u6761\u7ed3\u8bba\uff0c\u5269\u4e0b\u7684\u8981\u4e48\u88ab\u5408\u5e76\uff0c\u8981\u4e48\u88ab\u660e\u786e\u6807\u6ce8\u4e3a”\u53ef\u4ee5\u5ffd\u7565\uff0c\u522b\u7ba1\u5b83”\u3002<\/p>\n\n\n\n
            \u5224\u65ad\u529b\u5c31\u662f\u6562\u505a\u51cf\u6cd5\u3002<\/p>\n\n\n\n
            \n\n\n\n
            \u5fd7\u8bca LogMedic v1.0.0 \u00b7 Python + tkinter \u00b7 \u5355\u6587\u4ef6 exe\uff0c\u65e0\u9700\u5b89\u88c5 \u00b7 \u9002\u7528\u4e8e Windows 10 \/ 11 \/ Server 2016+<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"
            \u9879\u76ee\u5730\u5740\uff1aghostgorge\/LogMedic: LogMedic \u4e00\u4e2a\u7528 Python \u5199\u7684 Window […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_import_markdown_pro_load_document_selector":0,"_import_markdown_pro_submit_text_textarea":"","footnotes":""},"categories":[14,10],"tags":[71],"class_list":["post-8106","post","type-post","status-publish","format-standard","hentry","category-teacher","category-coding","tag-python","entry"],"yoast_head":"\n\u5fd7\u8bca LogMedic\uff1a\u628a Windows \u4e8b\u4ef6\u65e5\u5fd7\u91cc\u90a3 96% \u7684\u566a\u58f0\u7b5b\u6389 - \u5fc3\u4e00\u4fe1\u606f<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.xinyixx.com\/index.php\/2026\/09\/04\/logmedic\/\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u5fd7\u8bca LogMedic\uff1a\u628a Windows \u4e8b\u4ef6\u65e5\u5fd7\u91cc\u90a3 96% \u7684\u566a\u58f0\u7b5b\u6389 - \u5fc3\u4e00\u4fe1\u606f\" \/>\n<meta property=\"og:description\" content=\"\u9879\u76ee\u5730\u5740\uff1aghostgorge\/LogMedic: LogMedic \u4e00\u4e2a\u7528 Python \u5199\u7684 Window […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.xinyixx.com\/index.php\/2026\/09\/04\/logmedic\/\" \/>\n<meta property=\"og:site_name\" content=\"\u5fc3\u4e00\u4fe1\u606f\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-04T02:10:53+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-04T02:10:55+00:00\" \/>\n<meta name=\"author\" content=\"zentorno\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"zentorno\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.xinyixx.com\\\/index.php\\\/2026\\\/09\\\/04\\\/logmedic\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.xinyixx.com\\\/index.php\\\/2026\\\/09\\\/04\\\/logmedic\\\/\"},\"author\":{\"name\":\"zentorno\",\"@id\":\"https:\\\/\\\/www.xinyixx.com\\\/#\\\/schema\\\/person\\\/f6d999c2e397b7909f2a3490b537b8ee\"},\"headline\":\"\u5fd7\u8bca LogMedic\uff1a\u628a Windows \u4e8b\u4ef6\u65e5\u5fd7\u91cc\u90a3 96% \u7684\u566a\u58f0\u7b5b\u6389\",\"datePublished\":\"2026-09-04T02:10:53+00:00\",\"dateModified\":\"2026-09-04T02:10:55+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.xinyixx.com\\\/index.php\\\/2026\\\/09\\\/04\\\/logmedic\\\/\"},\"wordCount\":106,\"publisher\":{\"@id\":\"https:\\\/\\\/www.xinyixx.com\\\/#organization\"},\"keywords\":[\"python\"],\"articleSection\":[\"\u6559\u7a0b\",\"\u7f16\u7a0b\"],\"inLanguage\":\"zh-Hans\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.xinyixx.com\\\/index.php\\\/2026\\\/09\\\/04\\\/logmedic\\\/\",\"url\":\"https:\\\/\\\/www.xinyixx.com\\\/index.php\\\/2026\\\/09\\\/04\\\/logmedic\\\/\",\"name\":\"\u5fd7\u8bca LogMedic\uff1a\u628a Windows \u4e8b\u4ef6\u65e5\u5fd7\u91cc\u90a3 96% \u7684\u566a\u58f0\u7b5b\u6389 - \u5fc3\u4e00\u4fe1\u606f\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.xinyixx.com\\\/#website\"},\"datePublished\":\"2026-09-04T02:10:53+00:00\",\"dateModified\":\"2026-09-04T02:10:55+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.xinyixx.com\\\/index.php\\\/2026\\\/09\\\/04\\\/logmedic\\\/#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.xinyixx.com\\\/index.php\\\/2026\\\/09\\\/04\\\/logmedic\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.xinyixx.com\\\/index.php\\\/2026\\\/09\\\/04\\\/logmedic\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\\\/\\\/www.xinyixx.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u5fd7\u8bca LogMedic\uff1a\u628a Windows \u4e8b\u4ef6\u65e5\u5fd7\u91cc\u90a3 96% \u7684\u566a\u58f0\u7b5b\u6389\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.xinyixx.com\\\/#website\",\"url\":\"https:\\\/\\\/www.xinyixx.com\\\/\",\"name\":\"\u5fc3\u4e00\u4fe1\u606f\",\"description\":\"\u5b66\u4e60\u3001\u8bb0\u5f55\u3001\u5206\u4eab\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.xinyixx.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.xinyixx.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.xinyixx.com\\\/#organization\",\"name\":\"\u5fc3\u4e00\u4fe1\u606f\",\"url\":\"https:\\\/\\\/www.xinyixx.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\\\/\\\/www.xinyixx.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"http:\\\/\\\/www.xinyixx.com\\\/wp-content\\\/uploads\\\/2023\\\/05\\\/11-1.png\",\"contentUrl\":\"http:\\\/\\\/www.xinyixx.com\\\/wp-content\\\/uploads\\\/2023\\\/05\\\/11-1.png\",\"width\":1024,\"height\":1024,\"caption\":\"\u5fc3\u4e00\u4fe1\u606f\"},\"image\":{\"@id\":\"https:\\\/\\\/www.xinyixx.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.xinyixx.com\\\/#\\\/schema\\\/person\\\/f6d999c2e397b7909f2a3490b537b8ee\",\"name\":\"zentorno\",\"sameAs\":[\"http:\\\/\\\/www.xinyixx.com\"],\"url\":\"https:\\\/\\\/www.xinyixx.com\\\/index.php\\\/author\\\/gorgegao\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"\u5fd7\u8bca LogMedic\uff1a\u628a Windows \u4e8b\u4ef6\u65e5\u5fd7\u91cc\u90a3 96% \u7684\u566a\u58f0\u7b5b\u6389 - \u5fc3\u4e00\u4fe1\u606f","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.xinyixx.com\/index.php\/2026\/09\/04\/logmedic\/","og_locale":"zh_CN","og_type":"article","og_title":"\u5fd7\u8bca LogMedic\uff1a\u628a Windows \u4e8b\u4ef6\u65e5\u5fd7\u91cc\u90a3 96% \u7684\u566a\u58f0\u7b5b\u6389 - \u5fc3\u4e00\u4fe1\u606f","og_description":"\u9879\u76ee\u5730\u5740\uff1aghostgorge\/LogMedic: LogMedic \u4e00\u4e2a\u7528 Python \u5199\u7684 Window […]","og_url":"https:\/\/www.xinyixx.com\/index.php\/2026\/09\/04\/logmedic\/","og_site_name":"\u5fc3\u4e00\u4fe1\u606f","article_published_time":"2026-09-04T02:10:53+00:00","article_modified_time":"2026-09-04T02:10:55+00:00","author":"zentorno","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"zentorno","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"3 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.xinyixx.com\/index.php\/2026\/09\/04\/logmedic\/#article","isPartOf":{"@id":"https:\/\/www.xinyixx.com\/index.php\/2026\/09\/04\/logmedic\/"},"author":{"name":"zentorno","@id":"https:\/\/www.xinyixx.com\/#\/schema\/person\/f6d999c2e397b7909f2a3490b537b8ee"},"headline":"\u5fd7\u8bca LogMedic\uff1a\u628a Windows \u4e8b\u4ef6\u65e5\u5fd7\u91cc\u90a3 96% \u7684\u566a\u58f0\u7b5b\u6389","datePublished":"2026-09-04T02:10:53+00:00","dateModified":"2026-09-04T02:10:55+00:00","mainEntityOfPage":{"@id":"https:\/\/www.xinyixx.com\/index.php\/2026\/09\/04\/logmedic\/"},"wordCount":106,"publisher":{"@id":"https:\/\/www.xinyixx.com\/#organization"},"keywords":["python"],"articleSection":["\u6559\u7a0b","\u7f16\u7a0b"],"inLanguage":"zh-Hans"},{"@type":"WebPage","@id":"https:\/\/www.xinyixx.com\/index.php\/2026\/09\/04\/logmedic\/","url":"https:\/\/www.xinyixx.com\/index.php\/2026\/09\/04\/logmedic\/","name":"\u5fd7\u8bca LogMedic\uff1a\u628a Windows \u4e8b\u4ef6\u65e5\u5fd7\u91cc\u90a3 96% \u7684\u566a\u58f0\u7b5b\u6389 - \u5fc3\u4e00\u4fe1\u606f","isPartOf":{"@id":"https:\/\/www.xinyixx.com\/#website"},"datePublished":"2026-09-04T02:10:53+00:00","dateModified":"2026-09-04T02:10:55+00:00","breadcrumb":{"@id":"https:\/\/www.xinyixx.com\/index.php\/2026\/09\/04\/logmedic\/#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.xinyixx.com\/index.php\/2026\/09\/04\/logmedic\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.xinyixx.com\/index.php\/2026\/09\/04\/logmedic\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.xinyixx.com\/"},{"@type":"ListItem","position":2,"name":"\u5fd7\u8bca LogMedic\uff1a\u628a Windows \u4e8b\u4ef6\u65e5\u5fd7\u91cc\u90a3 96% \u7684\u566a\u58f0\u7b5b\u6389"}]},{"@type":"WebSite","@id":"https:\/\/www.xinyixx.com\/#website","url":"https:\/\/www.xinyixx.com\/","name":"\u5fc3\u4e00\u4fe1\u606f","description":"\u5b66\u4e60\u3001\u8bb0\u5f55\u3001\u5206\u4eab","publisher":{"@id":"https:\/\/www.xinyixx.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.xinyixx.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"zh-Hans"},{"@type":"Organization","@id":"https:\/\/www.xinyixx.com\/#organization","name":"\u5fc3\u4e00\u4fe1\u606f","url":"https:\/\/www.xinyixx.com\/","logo":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.xinyixx.com\/#\/schema\/logo\/image\/","url":"http:\/\/www.xinyixx.com\/wp-content\/uploads\/2023\/05\/11-1.png","contentUrl":"http:\/\/www.xinyixx.com\/wp-content\/uploads\/2023\/05\/11-1.png","width":1024,"height":1024,"caption":"\u5fc3\u4e00\u4fe1\u606f"},"image":{"@id":"https:\/\/www.xinyixx.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.xinyixx.com\/#\/schema\/person\/f6d999c2e397b7909f2a3490b537b8ee","name":"zentorno","sameAs":["http:\/\/www.xinyixx.com"],"url":"https:\/\/www.xinyixx.com\/index.php\/author\/gorgegao\/"}]}},"_links":{"self":[{"href":"https:\/\/www.xinyixx.com\/index.php\/wp-json\/wp\/v2\/posts\/8106","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.xinyixx.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.xinyixx.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.xinyixx.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.xinyixx.com\/index.php\/wp-json\/wp\/v2\/comments?post=8106"}],"version-history":[{"count":1,"href":"https:\/\/www.xinyixx.com\/index.php\/wp-json\/wp\/v2\/posts\/8106\/revisions"}],"predecessor-version":[{"id":8107,"href":"https:\/\/www.xinyixx.com\/index.php\/wp-json\/wp\/v2\/posts\/8106\/revisions\/8107"}],"wp:attachment":[{"href":"https:\/\/www.xinyixx.com\/index.php\/wp-json\/wp\/v2\/media?parent=8106"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.xinyixx.com\/index.php\/wp-json\/wp\/v2\/categories?post=8106"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.xinyixx.com\/index.php\/wp-json\/wp\/v2\/tags?post=8106"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}