Unit 6: PowerShell for defenders · Lesson 2 of 7 · 20 min Pro

Filtering events with Get-WinEvent

Filter at the source with FilterHashtable, export failed sign ins and summarise them on the analysis box.