| Function Get-PowerShellLog { | |
| <# | |
| .SYNOPSIS | |
| Get-PowerShellLog extracts all PowerShell ScriptBlock Events [Evt 4104] from the Microsoft-Windows-PowerShell/Operational Event log for a specified timeframe | |
| .DESCRIPTION | |
| Query the event log and pull back all PowerShell ScriptBlock Events. | |
| Event 4104 | |
| Query and filter | |
| .PARAMETER | |
| Switch to pull back PowerShell ScriptBlock Log back a desired number of minutes |
| <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> | |
| <html> | |
| <head> | |
| <!--[if gte mso 9]><!--> | |
| <meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge"> | |
| <!--[if !mso]><!--> | |
| <!--<!--> | |
| <!--[if gte mso 9]><!--> | |
| <h1>You're viewing this in one of the following: | |
| <ul> |
Where to find user agent strings?
https://explore.whatismybrowser.com/useragents/explore/software_name/facebook-bot/
Test:
[rubin@reaper ~]$ curl -A "instagram" -I https://plrm.podcastalot.com