title: Creating Windows 10 Custom Logs without ecmangen.exe?
body: <p>I'm trying to forward events in Windows 10, I found a great <a href="https://github.com/palantir/windows-event-forwarding" rel="nofollow noreferrer">github repo</a> that seems to have all the subscription XML stuff in it that I need, but when I go to install the channels (read, logs) so that the subscriptions receive everything, it doesn't work because the custom channels aren't there...the <a href="https://github.com/palantir/windows-event-forwarding" rel="nofollow noreferrer">github repo</a> contains a dll that supposively contains the custom channels and a manifest file (.man) you can use to create it yourself (seems to have alot of XML in it).</p>
  
  <p>I didn't really trust a <code>.dll</code> I download from a github repo in my environment, so I decided that  since they tell you how to build the <code>.dll</code>.  The github repo references a <a href="https://blogs.technet.microsoft.com/russellt/2016/05/18/creating-custom-windows-event-forwarding-logs/" rel="nofollow noreferrer">technet blog post</a>, that tells you how to build the <code>.dll</code>, but it's a bit dated being from 2016 and all.</p>
  
  <p>I installed the Windows 10 SDK to try this out, but it doesn't include the file they told me to run to build the <code>.dll</code> from the manifest, mainly <code>C:\Program Files (x86)\Windows Kits\8.1\bin\x64\ecmangen.exe</code></p>
  
  <p>I read in an <a href="https://stackoverflow.com/questions/53028775/cannot-locate-ecmangen">unresolved unanswered post</a> that the executable was removed in from the Windows 10 SDK starting with version 10.0.16299.15, and that the op decided to just use an older version.</p>
  
  <p>Was this tool replaced with something else?  I don't really want to use a DLL I found in a github repo.</p>