MyITGuy
2/6/2018 - 6:04 PM

PowerShell: Get Windows Event Log XML

PowerShell: Get Windows Event Log XML

windows_evt_as_xml.ps1
content_copyfile_download
([xml](Get-WinEvent -ProviderName "Application Error" | ? {$_.Message -match 'kleopatra.exe' -and $_.Message -match 'QtGui4.dll'} | Select -First 1).ToXML()).Save([Console]::Out)