CmdID

CmdID / PowerShell / Cmdlets / Get

Get-AppLockerFileInformation

Gets the file information necessary to create AppLocker rules from a list of files or an event log. Windows Server PowerShell reference

From the Windows Server PowerShell reference 9 parameters Its page in the reference

Opens CmdID with your command, read as PowerShell. It is read in your browser and sent nowhere.

Parameters

9 in the Windows Server PowerShell reference
-DirectorySpecifies the directory that contains the files for which to get the file information.
-EventLogSpecifies that the file information is retrieved from the event log.
-EventTypeSpecifies the event type by which to filter the events.
-FileTypeSpecifies the generic file type for which to search.
-LogPathSpecifies the log name or file path of the event log where the AppLocker events are located.
-PackagesSpecifies a list of installed packaged applications, from which the file information is retrieved.
-PathSpecifies a list of paths to the files from which the file information is retrieved.
-RecurseSpecifies that all files and folders in the specified directory will be searched.
-StatisticsSpecifies the statistics to retrieve on the files included in the event log.