Skip to content

Instantly share code, notes, and snippets.

@Jackbennett
Created September 18, 2015 14:27
Show Gist options
  • Save Jackbennett/6a60041fc0ac93a60ce7 to your computer and use it in GitHub Desktop.
Save Jackbennett/6a60041fc0ac93a60ce7 to your computer and use it in GitHub Desktop.
<Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><P
rovider Name='PowerShell'/><EventID Qualifiers='0'>800</EventID><Level>4</Level
><Task>8</Task><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime='20
15-09-18T13:37:43.000000000Z'/><EventRecordID>256</EventRecordID><Channel>Windo
ws PowerShell</Channel><Computer>U05PC02.BHS.INTERNAL</Computer><Security/></Sy
stem><EventData><Data>get-item .\test</Data><Data> DetailSequence=1
DetailTotal=1
SequenceNumber=29
UserId=BHS\qty
HostName=ConsoleHost
HostVersion=4.0
HostId=9e72e985-f239-4f93-bd40-9e531d238116
EngineVersion=4.0
RunspaceId=daa2b465-4b46-45a4-8ad5-09291726b6ce
PipelineId=29
ScriptName=
CommandLine=get-item .\test</Data><Data>ParameterBinding(Get-Item): name
="Path
"; value=".\test"
</Data></EventData></Event>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment