# Code Snippet from aperturescience.su # Parameters # Body $emailbody = "The server has just been restarted. Relevant Windows Event log entries:`n" $emailbody += "------------------------------------------------------------------------`n" $entries = Get-WinEvent -logname system -MaxEvents 5000 -ErrorAction SilentlyContinue | Where-Object {((($_.id -eq 12) -or ($_.id -eq 13)) -and ($_.providername -eq "Microsoft-Windows-Kernel-General")) -or ($_.providername -eq "USER32") -or (($_.providername -eq "Microsoft-Windows-Kernel-Power") -and ($_.id -eq 41))} foreach ($entry in $entries) { $emailbody += $entry.timecreated $emailbody += $entry.Message $emailbody +="`n" } send-email $emailbody $true # Code Snippet from aperturescience.su