bloginfo

PowerShell : hwo to reduce verbosity from windows event logs

Nov 23rd, 2020 (edited)
268
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. # 1ère partie : désactiver tous les journaux des applications et des services Microsoft Windows
  2. $path='HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels'
  3. $key=Get-ChildItem -Path $path
  4. $mask='^HKEY_LOCAL_MACHINE(.*)$'
  5. ForEach($subkey in $key)
  6. {
  7.     $path=$subkey.Name -Replace $mask,'HKLM:$1'
  8.     Set-Itemproperty -Path $path -Name 'Enabled' -value 0 -ErrorAction SilentlyContinue
  9. }
  10. # Réduction de la verbosité des autres journaux
  11. $path='HKLM:\SYSTEM\CurrentControlSet\Services\EventLog'
  12. $key=Get-ChildItem -Path $path
  13. ForEach($subkey in $key)
  14. {
  15.     $path=$subkey.Name -Replace $mask,'HKLM:$1'
  16.     $subkey=Get-ChildItem -Path $path
  17.     ForEach($subsubkey in $subkey)
  18.     {
  19.         $path=$subsubkey.Name -Replace $mask,'HKLM:$1'
  20.         Set-Itemproperty -Path $path -Name 'TypesSupported' -value 3 -ErrorAction SilentlyContinue
  21.     }
  22. }
Add Comment
Please, Sign In to add comment