Skip to content

Instantly share code, notes, and snippets.

@jcaxmacher
Created February 20, 2020 16:06
Show Gist options
  • Save jcaxmacher/a79ca99bbb428c3f35b90de01dcd6906 to your computer and use it in GitHub Desktop.
Save jcaxmacher/a79ca99bbb428c3f35b90de01dcd6906 to your computer and use it in GitHub Desktop.
event viewer xml query
<QueryList>
<Query Id="0">
<Select Path="Security">
*[EventData[Data[@Name='QueryName'] and (Data='www.google.com')]]
</Select>
</Query>
</QueryList>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment