Why is manually filtering domain user login information from Windows Security logs inefficient, and what solution does the article propose?

Manually filtering logs for Event ID 4624 is time-consuming due to excessive irrelevant data and repeated judgments. The article automates this by developing a program using EventLogSession to parse logs locally or remotely via RPC, extracting key fields like IP address and timestamp.