Windows event logs & finding evil

HTB Content Academy
1

cans omeone help on skill assessment?

how to find the answer for the following?

  1. By examining the logs located in the “C:\Logs\DLLHijack” directory, determine the process responsible for executing a DLL hijacking attack. Enter the process name as your answer. Answer format: _.exe
    2.By examining the logs located in the “C:\Logs\PowershellExec” directory, determine the process that executed unmanaged PowerShell code. Enter the process name as your answer. Answer format: _.exe

i have been stuck for HOURS! please, advise

thank you!