---

Get-WinEvent -ComputerName DC01 -FilterXml @"
<QueryList><Query Id="0" Path="Security"><Select>
*[System[(EventID=4624) and TimeCreated[timediff(@SystemTime) &lt;= 604800000]]]
and *[EventData[Data[@Name='TargetUserName']='ivanov']]
</Select></Query></QueryList>
"@