none
Unknown RRS feed

  • General discussion

  • Thanks for sharing the script.

    $properties = @( 'TimeCreated', @{n='Account Name';e={$_.Properties[0].Value}}, @{n='Caller Computer Name';e={$_.Properties[1].Value}} ) Get-WinEvent -FilterHashTable @{LogName='Security'; ID=4740} | Select $properties

    Instead of 6, I have used Array Property 1 in Caller Computer name, which has actually given Caller computer value instead of 999.

    • Split by jrv Thursday, April 11, 2019 8:56 AM Off topic
    Thursday, April 11, 2019 8:35 AM