Agent-less windows event log collection