Xpath

From WikiWiki
Jump to navigation Jump to search

Windows Event viewer uses xpath to create queries. It is retarded...

Some examples for greater good:

https://blogs.technet.microsoft.com/askds/2011/09/26/advanced-xml-filtering-in-the-windows-event-viewer/

Code Comment
search for 4662 (group changed) of objecttype "bf967a9c-0de6-11d0-a285-00aa003049e2" which is group and accesslist = 7684 which is members
Example Example
Example Example


some tags to find this page: query, QueryList, eventdata, ObjectType, AccessList, Security