-
Notifications
You must be signed in to change notification settings - Fork 9
Expand file tree
/
Copy pathEvilize.ps1
More file actions
24 lines (23 loc) · 791 Bytes
/
Evilize.ps1
File metadata and controls
24 lines (23 loc) · 791 Bytes
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
[CmdletBinding()]
param (
[Parameter(Mandatory=$true, Position=0, HelpMessage="Please enter the path of event logs files")]
[string] $Logs_Path,
[Parameter(Mandatory=$false, Position=1, HelpMessage="parse the logs by WinEvent cmdlet not LogParser")]
[switch] $winevent,
[Parameter(Mandatory=$false, Position=2, HelpMessage="parse security logs which may takes time")]
[switch] $security,
[Parameter(Mandatory=$false, Position=3, HelpMessage="Parse source event IDs")]
[switch] $Source_Events,
[Parameter(Mandatory=$false, Position=4, HelpMessage="Parse source event IDs")]
[switch] $all_logs
)
function Evilize {
if ($winevent) {
. .\WinEvent\WinEvent.ps1
}
else{
. .\LogParser\Logparser.ps1
}
merge_csvs
}
Evilize