Skip to content

Instantly share code, notes, and snippets.

View loganflook's full-sized avatar

LoganFlook loganflook

View GitHub Profile
function Get-RdpLogonEvent
{
[CmdletBinding()]
param(
[Int32] $Last = 10
)
$RdpInteractiveLogons = Get-WinEvent -FilterHashtable @{
LogName='Security'
ProviderName='Microsoft-Windows-Security-Auditing'