Advance Event Viewer filter

[Bogdan090]

Hello,

Exist the possibility extract some information from Event Viewer about event id description via powershell.

For example I want to see if i have on Domain Controllers this event ID 4776 with this description "Authentication Package: WDigest"

Thank you!

Continue reading...