Build a PowerShell Tool for Windows Event and Text Log Analysis

Lab Overview

In this lab, you’ll practice building a PowerShell tool to analyze Windows event logs and text files. When you’re finished, you’ll have a functioning script to scan activity in a given timeframe.

Table of Contents

1. Brainstorm and Sketch Out a Tool
2. Use Get-WinEvent to Query Window Event Logs
3. Find Local Storage Volumes
4. Search all Local Storage Volumes for Log Files
5. Add Script Parameters
6. Add CSV Output
7. Add Simple Error Handling

Build a PowerShell Tool for Windows Event and Text Log Analysis