Yes, the text of this post is still on [Wayback/Archive] Forensics: Automating Active Directory Account Lockout Search with PowerShell (an example of deep XML filtering of event logs across multiple servers in parallel) | Microsoft Learn but the original images from blogs.technet.microsoft.com as well as the code snippet got lost due to link rot and incomplete migration. I restored the blog post with comments from the Wayback Machine archives.
I needed the images and the snippet to be able to write future blog post Some links on getting the most recent defragmentation time of a Windows volume hat is appearing in a week or so.
The script is downloadable from LockoutEventsXML.ps1 or via [Wayback/Archive] TechNetGalleryArchive/LockoutEventsXML.ps1 at master · GoateePFE/TechNetGalleryArchive · GitHub at [WaybackSave/Wayback/Archive] github.com/GoateePFE/TechNetGalleryArchive/raw/refs/heads/master/LockoutEventsXML.ps1 by [Wayback/Archive] GoateePFE (Ashley McGlone) · GitHub.
Note the blog post uses @" strings – with $using.variable to pass local variables to remote sessions. See these entries for more information about that topic:
- [Wayback/Archive] PowerShell is fun :) – Using
$usingin PowerShell for local variables in remote sessions - [Wayback/Archive] How to Use the
@Symbol in PowerShell | Delft Stack with the section Use the@Symbol for Here-Strings in PowerShell - [Wayback/Archive] PowerTip: Use Here-Strings with PowerShell – Scripting Blog [archived]
- [Wayback/Archive] Everything you wanted to know about variable substitution in strings – PowerShell | Microsoft Learn
- a
Queries:
- [Wayback/Archive] “Active Directory Account Lockout Search with PowerShell” at DuckDuckGo
- [Wayback/Archive] https://learn.microsoft.com/en-us/archive/blogs/ashleymcglone/forensics-automating-active-directory-account-lockout-search-with-powershell-an-example-of-deep-xml-filtering-of-event-logs-across-multiple-servers-in-parallel at DuckDuckGo
- [Wayback/Archive] “invoke-command” “$using” at DuckDuckGo
- [Wayback/Archive] powershell @” string at DuckDuckGo
- [Wayback/Archive] powershell here-strings at DuckDuckGo
- [Wayback/Archive] “GoateePFE” at DuckDuckGo
The Wiert Corner - irregular stream of stuff 