Skip to content

Instantly share code, notes, and snippets.

@Purp1eW0lf

Purp1eW0lf/rdp_log_investigate.ps1

Created February 15, 2022 23:26
Show Gist options
  • Save Purp1eW0lf/3180c5ccdd717044412434aad0188893 to your computer and use it in GitHub Desktop.
Save Purp1eW0lf/3180c5ccdd717044412434aad0188893 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
rdp_log_investigate.ps1
get-winevent -logname "Microsoft-Windows-TerminalServices-RemoteConnectionManager/Operational" |
? id -match 1149 |
sort Time* -descending |
fl time*, message
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment