Query eventlog of PCs for potential risk