Retrieve and Display Security Events with User Information with PowerShell

4 months ago
1

This PowerShell script utilizes the Get-EventLog cmdlet to fetch security events from the Windows Security log, specifically those generated by "Microsoft-Windows-Security-Auditing." The script excludes events with Event IDs 4624 (Logon) and 4634 (Logoff) to focus on other security-related events.

Loading comments...