more fixes
This commit is contained in:
@@ -599,9 +599,18 @@ Function Get-UniqueUserLogonActivity {
|
|||||||
Function Write-UserLogonActivityOutput {
|
Function Write-UserLogonActivityOutput {
|
||||||
Param(
|
Param(
|
||||||
[AllowNull()]
|
[AllowNull()]
|
||||||
[object[]]$ActivityEvents
|
[object[]]$ActivityEvents,
|
||||||
|
|
||||||
|
[Parameter(Mandatory=$true)]
|
||||||
|
[DateTimeOffset]$StartDateTime,
|
||||||
|
|
||||||
|
[Parameter(Mandatory=$true)]
|
||||||
|
[DateTimeOffset]$EndDateTime
|
||||||
)
|
)
|
||||||
|
|
||||||
|
Write-Output "Search window: $($StartDateTime.LocalDateTime.ToString('yyyy-MM-dd HH:mm:ss')) through $($EndDateTime.LocalDateTime.ToString('yyyy-MM-dd HH:mm:ss'))"
|
||||||
|
Write-Output ''
|
||||||
|
|
||||||
$Rows = @($ActivityEvents | Select-Object Date,Time,User,Activity,Source,Details)
|
$Rows = @($ActivityEvents | Select-Object Date,Time,User,Activity,Source,Details)
|
||||||
|
|
||||||
If ($Rows.Count -eq 0) {
|
If ($Rows.Count -eq 0) {
|
||||||
@@ -852,7 +861,7 @@ ForEach ($PowerFilter in $PowerFilters) {
|
|||||||
}
|
}
|
||||||
|
|
||||||
$OutputEvents = @(Get-UniqueUserLogonActivity -ActivityEvents $ActivityEvents | Sort-Object -Property TimeCreated)
|
$OutputEvents = @(Get-UniqueUserLogonActivity -ActivityEvents $ActivityEvents | Sort-Object -Property TimeCreated)
|
||||||
Write-UserLogonActivityOutput -ActivityEvents $OutputEvents
|
Write-UserLogonActivityOutput -ActivityEvents $OutputEvents -StartDateTime $StartDateTime -EndDateTime $EndDateTime
|
||||||
Try {
|
Try {
|
||||||
Write-PossibleUseWindowOutput -ActivityEvents $OutputEvents
|
Write-PossibleUseWindowOutput -ActivityEvents $OutputEvents
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user