public static ForensicTimeline Get(EventRecord input)
 {
     return new ForensicTimeline(input.WriteTime, "MACB", "EVENTLOG", "", input.LogPath, input.ToString());
 }