I used the Windows Domain Controller built in Performance Monitor data collector set for Active Directory (basically collects states for AD) e.g. 'active directory diagnostics'
This built in data collect creates the following types of files
the last one is a binary files I believe
I would can pull the first into Windows Event Viewer but is displays not data from any entry there are all blank (although I am sure there is data there)
the I can pull the last one into PerfMon and it shows loads of data
However from either of these built in utilities I cannot seem to export the data into CSV for example and cannot seem to read with get-winevent
Any ideas please, thanks very mcuh