.. / Win32_NTLogEvent

Displays the Windows Event Log


Functions:
Type:
Toolsets:

Logs

List logons on a system

Get-CimInstance -ClassName Win32_NTLogEvent -Filter "LogFile = 'Security' AND EventCode = '4624'" -CimSession $s
Usecase
Understand which accounts are used on a system

Comments
Create CimSession $s using New-CimSession




Updated: 2023-07-01
Contributor: Arris Huijgen (bitsadmin)