User Logon History Exporter

param (
    [string]$outputFilePath = "C:\UserLogonHistory.csv"
)
# Get the logon events from the Windows Event Log
$logonEvents = Get-WinEvent -LogName Security | Where-Object { $_.Id -eq 4624 }
# Create an array to store logon details
$logonDetails = @()
foreach ($event in $logonEvents) {
    # Extract details from each event
    $timeCreated = $event.TimeCreated
    $username = $event.Properties[5].Value  # The username is usually the 6th property
    $logonDetails += [PSCustomObject]@{
        TimeCreated = $timeCreated
        Username = $username
    }
}
# Export the logon details to a CSV file
$logonDetails | Export-Csv -Path $outputFilePath -NoTypeInformation
Write-Output "User logon history has been exported to $outputFilePath."