Get-WinEvent
Named by 2 kept items in this workspace.
Search every workspace for Get-WinEvent. It matches the name as written, so it can find other things that share it.
The items that name it 2
Check A inspects Security log metadata (enabled state, count, mode, size) with ListLog; Check B queries a Security EVTX copy for event 4688 in a UTC interval, capped at the newest 200 matches. Commands were syntax-parsed only, not run.
used by procmon-mcp for event log queries, including a Security log convenience wrapper for audit event IDs
All technologies in this workspace.