P2: No native Windows Event Log reader — syslog tasks non-functional on Windows

[Shreyas582]

Description

read_syslog is a text-based log reader designed for Unix /var/log/syslog. On Windows, there is no equivalent — the tool has no way to read Windows Event Logs (Security, System, Application channels) which are stored in binary EVTX format.

This means the syslog-summary task and any log-analysis workflow is effectively non-functional on Windows, despite Windows being a primary target platform for security triage.

Expected Behavior

Add a read_eventlog tool (or extend read_syslog with Windows support) that can:

1. Query Windows Event Log channels (Security, System, Application)
2. Filter by event ID, level, time range
3. Return structured entries (timestamp, source, event ID, message)

Could be implemented via wevtutil qe (already a system binary) or the winlog crate.

Affected Files

• cyber_tools/src/lib.rs (new tool implementation)
• core_engine/src/lib.rs (tool registry)