powershell 查詢登入的user

查詢登入的user

Get-WinEvent -FilterHashtable @{LogName="Security"; ID=4624} -computer 127.0.0.1 -MaxEvents 15 | Select-Object -Property @{n="SubjectUserName";expression={$_.properties[5].value}}