Using Powershell to Extract Fields from Windows Event Logs

Показать описание

A problem was raised on how to pull usernames, and times out of logon events in Windows Event Security Logs with Powershell. This video provides a step by step process of how a PowerShell script was created that helped achieve this goal.

00:00 Splash Screen
00:10 Introduction
01:40 Start with Get-Help
02:40 Determining the Required Parameters
03:54 Working with Get-EventLog
07:34 Assign Results to a Variable
07:55 Converto-Json
09:44 Adding Data to a Custom PS Object
10:50 Get-Content to import the json file
15:20 How to make script work with more than one Windows Event Log
15:50 Building a For Loop
19:36 Working with an Array[]

The PowerShell Playlist can be accessed below

The latest L.A.M.E. Splunk apps are available at

Lame Creations

Рекомендации по теме

Комментарии

Great Job making this video.... This is golden for people who need to analyse 1000+ logs for a specific event. Finding something specific from the message has always been tedious.

ThePiyush

Using Powershell to Extract Fields from Windows Event Logs

Using Powershell to Extract Fields from Windows Event Logs

PowerShell Tutorial: Import & Export CSV Data 🔥⌨️ DevOps | Automation | Developer

Powershell | Filter/Extract specific logs from log file | Tutorial 1

How to Import/Export data to CSV files using PowerShell

PowerShell Tutorials : Editing CSV files (Adding columns, editing data)

Powershell Basics - Video 1 - How to recursively extract strings from files using Powershell

Search, Extract & Save Data from a TXT File using PowerShell

Working With Excel Using PowerShell

PowerShell to extract Metadata from MSG Files

How to extract a certain part of a text using powershell?

PowerShell - Get all Active Directory Users with Powershell and export to CSV-File

Automate Active Directory with PowerShell Tutorial 2 : Importing CSV

How to Extract User Objects from Active Directory in Powershell (High Compression).mov

Html table to Powershell

PowerShell Intermediate Tutorial 5 : CSV Files [Intermediate]

Automate Excel with PowerShell

PowerShell Tutorials : Filter CSV data by date column

Get All Active Directory Users Details - Using PowerShell

Extract Data from Images using PowerShell and Textract

Format the output of a string in multiple columns with PowerShell

PowerShell Tutorials : Splitting up CSV files

PowerShell Quick Tips : Invoke-RestMethod vs Invoke-WebRequest (Calling Rest APIs)

PowerShell S2E51 (Search)

Get members of multiple Security Groups using PowerShell