Windows事件查看器不显示近期解锁事件问题求助
Windows事件查看器不显示近期解锁事件问题求助
我刚在Windows 11上用一段查询创建了自定义视图,结果明明刚解锁了自己的电脑,却发现最新的解锁事件还是02-28T06:55这个时间点的,这到底是怎么回事啊?
我用的查询代码如下:
<QueryList> <Query Id="0" Path="System"> <Select Path="System">*[System[Provider[@Name='Microsoft-Windows-Kernel-Power'] and (EventID=42)]]</Select> <Select Path="System">*[System[Provider[@Name='Microsoft-Windows-Kernel-Power'] and (EventID=107)]]</Select> <Select Path="System">*[System[Provider[@Name='eventlog'] and (EventID=6006)]]</Select> <Select Path="System">*[System[Provider[@Name='eventlog'] and (EventID=6005)]]</Select> <Select Path="System">*[System[Provider[@Name='User32'] and (EventID=4800 or EventID=4801)]]</Select> </Query> </QueryList>
备注:内容来源于stack exchange,提问作者ProfK
相关产品推荐
相关产品推荐

