Key Features
- Event log capture with configurable log levels
- Support for session name customization
- Simplified view of the first 10 tracked events
- Windows PowerShell 5.1 or higher
- Administrator privileges
- Windows environment (Windows 10/11 recommended)
- Copy the script to a directory of your choice
- Open PowerShell as Administrator
- Navigate to the script directory
- Run the script directly
- Unique identifier for the trace session
- Hexadecimal value that controls the verbosity of the trace
Capture limited to the first 10 events in the default view
- We value community contributions, if you are interested in contributing, please open issues or submit pull requests in the repository.