Update README.md

This commit is contained in:
Eric Conrad
2016-09-20 15:47:31 -04:00
committed by GitHub
parent 9c6854a0b2
commit 927595c549

View File

@ -17,6 +17,18 @@ Sample evtx files are in the .\evtx directory
`.\DeepBlue.ps1 <event log name> <evtx filename>` `.\DeepBlue.ps1 <event log name> <evtx filename>`
If you see this error:
`.\DeepBlue.ps1 : File C:\Users\sec580\Desktop\DeepBlueCLI-0.1\DeepBlue.ps1 cannot be loaded because running scripts is
disabled on this system. For more information, see about_Execution_Policies at
http://go.microsoft.com/fwlink/?LinkID=135170.`
You must run Set-ExecutionPolicy as Administrator, here is an example:
`Set-ExecutionPolicy RemoteSigned`
See `get-help Set-ExecutionPolicy` for more options.
## Examples: ## Examples:
### Process local Windows security event log: ### Process local Windows security event log: