seguridad/3.- Extras/IncidentResponseTool-ACTUALIZADAMIA/powershell/script_eventos_login.ps1

 Get-EventLog system -after (get-date).AddDays(-6) | where {$_.InstanceId -eq 7001}


#Get-EventLog oalerts INICIO SESION: 4634 7001 4624

#Get-WinEvent -LogName Security| Where-Object {$_.ID -eq 4624 }