---

Get-WinEvent -FilterHashtable @{LogName="Security"; Id=4625} -MaxEvents 3 |
    ForEach-Object {
        "=== $($_.TimeCreated) ==="
        $x = [xml]$_.ToXml()
        $x.Event.EventData.Data | ForEach-Object { "{0} = {1}" -f $_.Name, $_."#text" }
    }