PowerShell Events
summary
Shows how the PowerShell event engine wires up .NET, WMI and PowerShell engine events and gives runnable examples that stop or start processes. Demonstrates permanent WMI events vs temporary registrations, uses the PowerEvents module by Trevor Sullivan and hand‑coded WMI (with example WQL query, filter/consumer/binding), and builds a file‑monitor that writes to a log. Calls out real limitations: flaky persistence, only a few consumer actions (event log, email, VBScript, cmd, log file), cleanup required, action block and scope/stream weirdness, and remoting caveats plus a scheduled‑task workaround.
AI-written summary · about
chapters (6)
related talks
43mPowerShell Tooling
48mUnexplained phenomena: powerful tricks you likely didn't know were even possible
41mWhat's Cooking with PowerShell Core?
37mUsing Windows PowerShell to create scripts your users want to use
45mTake your PowerShell to the next level with error handling and debugging
01h 45mWriting Award Winning PowerShell Functions and Script Modules
01h 02mThe State of the Shell
45mInteractive Enhancements to PowerShell