Index

powershell kim benim bilg canli takip

$myUser = [System.Security.Principal.WindowsIdentity]::GetCurrent().Name $start = (Get-Date).AddDays(-7) Get-WinEvent -FilterHashtable @{LogName='Security';Id=4624;StartTime=$start} | Where-Object {$_.Properties[8].Value -eq 3 -and $_.Properties[5].Value -ne $myUser} | Select-Object TimeCreated, @{N='User';E={$_.Properties[5].Value}}, @{N='IP';E={$_.Properties[18].Value}}, @{N='PC';E={$_.Properties[17].Value}} | Sort-Object TimeCreated -Descending | FT -a