MyITGuy
5/17/2017 - 1:43 PM

PowerShell: Save Windows Event as XML

PowerShell: Save Windows Event as XML

file01.ps1
content_copyfile_download
([xml](Get-WinEvent -ProviderName "Application Error" | ? {$_.Message -match 'hpCaslNotification.exe' -and $_.Message -match 'KERNELBASE.dll'} | Select -First 1).ToXML()).Save([Console]::Out)