manuth/PortValhalla
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Fix non-functioning events

Browse source
This commit is contained in:
Manuel Thalmann 2024-03-22 14:51:17 +01:00
parent 30f98c4cb1
commit 5e6eebf8ad
1 changed files with 11 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
scripts/Windows/OS/User/Add.ps1
View file

@ -141,7 +141,17 @@ function Start-EventDrivenTask() {
)
$identifier = "EventLog$EventID";
Write-EventLog -LogName Application -Source "Application" -EventId $EventID -Message "This event was created by $env:Username";
Register-WmiEvent -Query "SELECT * FROM __InstanceCreationEvent WHERE TargetInstance ISA 'Win32_NTLogEvent' AND EventIdentifier=$EventID" -SourceIdentifier "$identifier";
$applicationLog = Get-EventLog -List | Where-Object { $_.Log -eq "Application" };
Register-ObjectEvent -InputObject $applicationLog -EventName EntryWritten -Action {
$entry = $event.SourceEventArgs.Entry;
if ($entry.EventID -eq $EventID) {
New-Event -SourceIdentifier $identifier;
}
};
Wait-Event -SourceIdentifier $identifier;
} -args $EventID
}