Skip to content

Commit

Permalink
Tweaked format around $Filterxml variable.
Browse files Browse the repository at this point in the history
  • Loading branch information
Stephen Valdinger committed Aug 1, 2018
1 parent 95598be commit 09d9090
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion Public/Get-UserLogonEvent.ps1
Original file line number Diff line number Diff line change
Expand Up @@ -41,8 +41,8 @@ Function Get-UserLogonEvent {

#Covert Hours to milliseconds, used by FilterXML Query
$ms = ($Hours * 3600000)
[xml]$Filterxml = @"

[xml]$Filterxml = @"
<QueryList>
<Query Id="0" Path="Security">
<Select Path="Security">*[System[EventID='4624' and TimeCreated[timediff(@SystemTime) &lt; = $ms]] and EventData/Data[@Name='TargetUserName'] = '$User']</Select>
Expand Down

0 comments on commit 09d9090

Please sign in to comment.