Skip to content

Instantly share code, notes, and snippets.

@scotgabriel
Last active May 2, 2018 21:50
Show Gist options
  • Save scotgabriel/e4e232b514f1390a66837c46e0740e04 to your computer and use it in GitHub Desktop.
Save scotgabriel/e4e232b514f1390a66837c46e0740e04 to your computer and use it in GitHub Desktop.
Get Eventlog Entries from Forwarded Events log
# Powershell to get last 2 collected entries from Forwarded Events log having ID of 4625 (failed logon)
get-winevent -filterhashtable @{logname = 'ForwardedEvents'; id = 4625} -maxevents 2 | format-table -wrap -autosize
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment