How to filter security logs of active directory by username
<QueryList>
<Query Id="0" Path="Security">
<Select Path="Security">*[
EventData[Data[@Name='TargetUserName']='DataDevice1']]</Select>
</Query>
</QueryList>
No hay comentarios:
Publicar un comentario