Errors on Application.evtx

sans-blue-team / DeepBlueCLI

GNU General Public License v3.0

2.16k stars 352 forks source link

Errors on Application.evtx #17

Closed RandyRandleman closed 4 years ago

RandyRandleman commented 4 years ago

Getting the following error on Application.evtx with known logs within it.

Get-WinEvent @{path="C\Windows\System32\winevt\logs\Application.evtx";ID=2} -ErrorAction Stop Get-WinEvent error: No events were found that match the specified selection criteria.

joswr1ght commented 4 years ago

Is your PowerShell session opened as an Administrator? Are there any logs in that evtx file? Thanks!

RandyRandleman commented 4 years ago

Disregard, Josh. I see now which Events are being pulled!

joswr1ght commented 4 years ago

Awesome! Glad it’s working for you. Thanks for reaching out. 👊