Use Powershell to check securtity eventlog for logon

 

Use Powershell to report content from the eventlog. You can filter the type of log (security in this case) and even filter on the content of a log entry.

Use Powershell to check securtity eventlog for logon:

  • -Logname targets the logfile you wish to scan
  • -Newest only displays the latest x entries
  • -InstanceID represents the EventID. 4624 is an successfully logon

Leave a Reply

Your email address will not be published. Required fields are marked *