Skip to content

Instantly share code, notes, and snippets.

@Jackbennett

Jackbennett/gist:1e087fa77544686d33153732f724a413

Created June 14, 2017 12:13
Show Gist options
  • Save Jackbennett/1e087fa77544686d33153732f724a413 to your computer and use it in GitHub Desktop.
Save Jackbennett/1e087fa77544686d33153732f724a413 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
gistfile1.txt
$EndTime = Get-WinEvent -ComputerName $ComputerName -FilterHashTable @{LogName = "Microsoft-Windows-AppLocker/EXE and DLL"; ID = 8001} -MaxEvents 1
Get-WinEvent -ComputerName $ComputerName -FilterHashTable @{LogName = "Microsoft-Windows-AppLocker/EXE and DLL"; EndTime = $EndTime.TimeCreated}
write-warning $EndTime.timecreated()
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment