eventvwr.exe

Event Tracing for Windows (ETW)

The PowerShell command noun winEvent allows to query and write to log files with PowerShell.

This example demonstrates how get-winEvent can be used to determine which application prevents a USB device from being ejected.