Josh Rickard MSAdministrator
MSAdministrator
/ Get-TargetedWinEvent.ps1
Created
January 10, 2018 18:00
— forked from jasonadsit/Get-TargetedWinEvent.ps1
Get-TargetedWinEvent.ps1
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| function Get-TargetedWinEvent { | |
| <# | |
| .SYNOPSIS | |
| Searches Windows logs for events related to specific Event IDs or EventData.Data values | |
| .DESCRIPTION | |
| Searches Windows logs for events related to specific Event IDs or EventData.Data values | |
| Supports searching offline/exported evt/evtx files as well as online machines | |
| .PARAMETER SearchTerm | |
| EventData.Data property value to search for |