uj könyvtär Scripts
This commit is contained in:
16
Scripts/powershell/RDP események exportálása CSV-be.ps1
Normal file
16
Scripts/powershell/RDP események exportálása CSV-be.ps1
Normal file
@@ -0,0 +1,16 @@
|
||||
# RDP események exportálása CSV-be
|
||||
Get-WinEvent -LogName "Microsoft-Windows-TerminalServices-LocalSessionManager/Operational" `
|
||||
| Where-Object { $_.Id -in 21,22,23,24,25,39,40,41 } `
|
||||
| Select-Object TimeCreated, Id, LevelDisplayName, Message `
|
||||
| Export-Csv "C:\Logs\RDP_LocalSessionManager.csv" -NoTypeInformation -Encoding UTF8
|
||||
|
||||
Get-WinEvent -LogName "Microsoft-Windows-TerminalServices-RemoteConnectionManager/Operational" `
|
||||
| Select-Object TimeCreated, Id, LevelDisplayName, Message `
|
||||
| Export-Csv "C:\Logs\RDP_RemoteConnectionManager.csv" -NoTypeInformation -Encoding UTF8
|
||||
|
||||
Get-WinEvent -LogName "System" | Where-Object { $_.Id -eq 56 -and $_.ProviderName -eq "TermDD" } `
|
||||
| Select-Object TimeCreated, Id, LevelDisplayName, Message `
|
||||
| Export-Csv "C:\Logs\RDP_TermDD.csv" -NoTypeInformation -Encoding UTF8
|
||||
|
||||
|
||||
|
||||
Reference in New Issue
Block a user