Finally, depending on where that eventdata is stored, Get-WinEventData is a quick function that will take an event object and extract known eventdata from it via XML.

In PowerShell 1.0 you could use the Export-Clixml cmdlet to create an XML representation of a group of objects. However, these serialized objects and resulting XML file weren't designed to be used ...

Prof. Powershell 'Casting' an Object Spell in PowerShell One handy PowerShell trick is to tell the engine to treat something as a particular type of object. By Jeffery Hicks 07/23/2013 What makes ...