Mostrar Eventos de Aplicación con PowerShell | Operating systems, scripting, PowerShell and security

Logs, PowerShell

Get-EventLog -LogName Application |
  ForEach-Object {
      [PSCustomObject]@{
          Time = $_.TimeGenerated
          LogonType = $_.ReplacementStrings[8]
          Process = $_.ReplacementStrings[9]
          Domain = $_.ReplacementStrings[5]
          User = $_.ReplacementStrings[6]
          Method = $_.ReplacementStrings[10]
          Source = $_.Source

      }
  } | Out-GridView

Get-EventLog -LogName Application |

ForEach-Object {

[PSCustomObject]@{

Time = $_.TimeGenerated

LogonType = $_.ReplacementStrings[8]

Process = $_.ReplacementStrings[9]

Domain = $_.ReplacementStrings[5]

User = $_.ReplacementStrings[6]

Method = $_.ReplacementStrings[10]

Source = $_.Source

}

} | Out-GridView

Mostrar Eventos de Aplicación con PowerShell (PowerShell, Logs)

LIBRO DE POWERSHELL

LO ÚLTIMO

VÍDEOS