diff --git a/README.md b/README.md index 24fd1e4..92bb2d6 100644 --- a/README.md +++ b/README.md @@ -17,36 +17,25 @@ Sample evtx files are in the .\evtx directory Process local Windows security event log: -` -.\DeepBlue.ps1 -` +`.\DeepBlue.ps1` or: -` -.\DeepBlue.ps1 -log security -` +`.\DeepBlue.ps1 -log security` Process local Windows system event log: -` -.\DeepBlue.ps1 -log system -` +`.\DeepBlue.ps1 -log system` or: -` -.\DeepBlue.ps1 "" system -` +`.\DeepBlue.ps1 "" system` Process evtx file: -` -.\DeepBlue.ps1 .\evtx\new-user-security.evtx -` + +`.\DeepBlue.ps1 .\evtx\new-user-security.evtx` or: -` -.\DeepBlue.ps1 -file .\evtx\new-user-security.evtx -` +`.\DeepBlue.ps1 -file .\evtx\new-user-security.evtx`