wef

wecutil.exe

Windows Event Collector UTILity

enumerate subscriptions

wecutil es

get details

wecutil gs SUBSCRIPTION_NAME