A
Size: a a a
A
S
S
D
$BanCount=1
Get-EventLog -LogName 'Security' -InstanceId 4625 |
Select-Object @{
Name='TargetUserName'
Expression={$_.ReplacementStrings[5]}
},
@{
Name='IpAddress'
Expression={$_.ReplacementStrings[-2]}
}| Group-Object -Property IpAddress | Where Count -ge $BanCount
A
D
VB
D
VB
VB
VB
D
I
VB
I
VB
I
I
VB
VB