# Get-WinEvent

## Find the last 10 quarantine events
```
Get-WinEvent -LogName "Microsoft-Windows-Windows Defender/Operational" |
  Where-Object { $_.Message -like "*quarantine*" } |
  Select-Object TimeCreated, Id, Message -First 10
```