發表文章

目前顯示的是 4月, 2015的文章

Linux vi replace command

%s/\.jpg/\.jpg\"/g %s/old/new/g

Windows 2008 R2 event forward XML sample

      *[System[(EventID=4662)]]and *[EventData[Data[@Name='ObjectServer'] and (Data='DS')]] and *[EventData[Data[@Name='AccessMask'] and (Data= '0x20')]] and *[EventData[Data[@Name='ObjectType'] and (Data= '%{e0fa1e8c-9b45-11d0-afdd-00c04fd930c9}')]]