AutoHotkey Community

Code: Select all

RegRead, OutputVar, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion, ProgramFilesDir
MsgBox, Program files are in: %OutputVar%

Code: Select all

; vKey := "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Elevate\StoppCommLog-UAC"
; RegRead vExist, %vKey%, Id
RegRead, vExist, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Elevate\StoppCommLog-UAC, Id
If ErrorLevel ; Should error if no key exists.
{	MsgBox 16, Rad %A_LineNumber% -> %A_ScriptName%,
	( LTrim
		KEY is missing!`n
		ErrorLevel .: %ErrorLevel% `n
		%vKey%
	)	
}

MsgBox % "Result .: " vExist

Code: Select all

; https://4sysops.com/archives/search-the-event-log-with-the-get-winevent-powershell-cmdlet/
SetWorkingDir %A_ScriptDir%  ; Ensures a consistent starting directory
#SingleInstance force
OutFile := A_Temp "\results.txt" ; Define file for piped output from Task Scheduler
IfExist %OutFile% ; If there's an existing file
	FileDelete % OutFile ; Delete the existing file

psScript =
(
Get-WinEvent @{logname='application','system';starttime=[datetime]::today;level=2 } | select logname, timecreated, id, message > %OutFile%
)

RunWait PowerShell.exe -Command &{%psScript%} ,, hide
Run, C:\Windows\Notepad.exe %OutFile% ; Show the file in Notepad

; Use this call if you want to see PowerShell output
;Run powershell.exe -NoExit -Command %psScript%