Create Check-Suspicious-Logins.ps1

rswio · Jan 26, 2025 · a04fda9 · a04fda9
1 parent 4bc7eb1
commit a04fda9
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/Security/Check-Suspicious-Logins.ps1 b/Security/Check-Suspicious-Logins.ps1
@@ -0,0 +1,3 @@
+Get-EventLog -LogName Security -EntryType SuccessAudit -Newest 1000 | Where-Object {
+    $_.Message -match "Failed logon"
+}