Skip to main content

All Questions

Tagged with
1 vote
0 answers
5k views

How to use Get-WinEvent to get all information between a specific time period?

Some background I am encountering some crash and freeze issues I want to get a better handle on. For this, I want to investigate all available event & log information for a specific time period. I ...
BmyGuest's user avatar
  • 426
0 votes
0 answers
25 views

Auditing relevant data and then extracting it

I've turned on (and then off again) auditing on our Fileserver (windows 2012r2) We have about 8 directories that are being written to and have about 50 directories in total. I have added auditing onto ...
Stuart Hurst's user avatar
1 vote
1 answer
2k views

Powershell Monitor Clipboard Change

I'm trying monitor clipboard change by powershell, and not consider to use comparing (Get-Clipboard) before and after change because it cannot distinguish between "two copy are identical" and "haven't ...
Richard Chung's user avatar
0 votes
0 answers
368 views

FileSystemWatcher does not hear events when application changes files

I have a Powershell Core script that uses FileSystemWatcher to listen for changes in a directory recursively. It behaves as expected when a user uses Windows Explorer or a shell to add or modify a ...
Charlweed's user avatar
  • 255
1 vote
1 answer
518 views

powershell : how to detect an uninstalled usb device?

I would like my Powershell script to detect when I plug in a usb device. I have set the GPOs to block the automatic installation of usb devices. For now I am using this command to detect when a usb ...
M.Brbr's user avatar
  • 149
-1 votes
2 answers
5k views

How to Create a Windows Task that activates on event in Powershell

Hey I need to create a windows task that acts much like the Logoff Scripts in Group Policy (our environment does not have AD) do. The task needs to run as the logged in user so that the script can ...
nyshanin's user avatar