ok and I have pushed the windows event log stuff here: https://github.com/trailofbits/osquery-pr/tree/alessandro/feature/windows-event-log