Question: where are evtx files stored?
Answer: evtx files, and you can usually find them in C:\windows\system32\winevt\Logs . You can extract the events using FullEventLogView from . evtx files stored in your local system (As long as they are not locked and you have read permission) and from . evtx files stored on external drive.