---

PS C:\Windows\system32>
PS C:\Windows\system32> $since = (Get-Date).AddMinutes(-5)
PS C:\Windows\system32>
PS C:\Windows\system32> Get-WinEvent -FilterHashtable @{
>>     LogName = 'Microsoft-Windows-AppModel-Runtime/Admin'
>>     StartTime = $since
>> } -ErrorAction SilentlyContinue |
>>     Select-Object TimeCreated, Id, LevelDisplayName, Message |
>>     Format-List
PS C:\Windows\system32>
PS C:\Windows\system32> Get-WinEvent -FilterHashtable @{
>>     LogName = 'Microsoft-Windows-TWinUI/Operational'
>>     StartTime = $since
>> } -ErrorAction SilentlyContinue |
>>     Select-Object TimeCreated, Id, LevelDisplayName, Message |
>>     Format-List
PS C:\Windows\system32>
PS C:\Windows\system32>
PS C:\Windows\system32>
PS C:\Windows\system32>
PS C:\Windows\system32>
PS C:\Windows\system32>
PS C:\Windows\system32> $since = (Get-Date).AddMinutes(-5)
PS C:\Windows\system32>
PS C:\Windows\system32> Get-WinEvent -FilterHashtable @{
>>     LogName = 'Microsoft-Windows-AppModel-Runtime/Admin'
>>     StartTime = $since
>> } -ErrorAction SilentlyContinue |
>>     Select-Object TimeCreated, Id, LevelDisplayName, Message |
>>     Format-List


TimeCreated      : 15.10.2026 12:43:48
Id               : 217
LevelDisplayName : Сведения
Message          : Удален контейнер Desktop AppX 97e04cb6-c870-11f1-ab43-60a4b758f894 для пакета Microsoft.Windows.Photos_2026.11090.
                   22001.0_x64__8wekyb3d8bbwe.

TimeCreated      : 15.10.2026 12:43:48
Id               : 201
LevelDisplayName : Сведения
Message          : Создан процесс 10604 для приложения Microsoft.Windows.Photos_8wekyb3d8bbwe!App в пакете Microsoft.Windows.Photos_2
                   026.11090.22001.0_x64__8wekyb3d8bbwe. [LaunchProcess]

TimeCreated      : 15.10.2026 12:43:48
Id               : 211
LevelDisplayName : Сведения
Message          : Добавлен процесс 10604 к контейнеру Desktop AppX 97e04cb6-c870-11f1-ab43-60a4b758f894 для пакета Microsoft.Windows
                   .Photos_2026.11090.22001.0_x64__8wekyb3d8bbwe.

TimeCreated      : 15.10.2026 12:43:48
Id               : 210
LevelDisplayName : Сведения
Message          : Создан контейнер Desktop AppX 97e04cb6-c870-11f1-ab43-60a4b758f894 для пакета Microsoft.Windows.Photos_2026.11090.
                   22001.0_x64__8wekyb3d8bbwe.



PS C:\Windows\system32>
PS C:\Windows\system32> Get-WinEvent -FilterHashtable @{
>>     LogName = 'Microsoft-Windows-TWinUI/Operational'
>>     StartTime = $since
>> } -ErrorAction SilentlyContinue |
>>     Select-Object TimeCreated, Id, LevelDisplayName, Message |
>>     Format-List
PS C:\Windows\system32>