Pasted

# Code Snippet from aperturescience.su
# Parameters
 
# Body
 
$emailbody = "The server has just been restarted. Relevant Windows Event log entries:`n"
$emailbody += "------------------------------------------------------------------------`n"
 
$entries = Get-WinEvent -logname system -MaxEvents 5000 -ErrorAction SilentlyContinue | Where-Object {((($_.id -eq 12) -or ($_.id -eq 13)) -and ($_.providername -eq "Microsoft-Windows-Kernel-General")) -or ($_.providername -eq "USER32") -or (($_.providername -eq "Microsoft-Windows-Kernel-Power") -and ($_.id -eq 41))}
 
 
foreach ($entry in $entries)
{
    $emailbody += $entry.timecreated
    $emailbody += $entry.Message
    $emailbody +="`n"
}
 
send-email $emailbody $true
 
# Code Snippet from aperturescience.su