Skip to content

Instantly share code, notes, and snippets.

@maxfunke

maxfunke/getLoginsFromEventlog.ps1

Created November 12, 2018 08:09
Show Gist options
  • Save maxfunke/388451765fb9e4a39753b463661a1f94 to your computer and use it in GitHub Desktop.
Save maxfunke/388451765fb9e4a39753b463661a1f94 to your computer and use it in GitHub Desktop.
Download ZIP
logins fetched from windows eventlog, filtered
Raw
getLoginsFromEventlog.ps1
Get-EventLog -LogName System -Source Microsoft-Windows-Winlogon -After (Get-Date).AddDays(-7) | where {$_.InstanceId -eq 7001}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment