---

$boot = (Get-CimInstance Win32_OperatingSystem).LastBootUpTime

Get-WinEvent -FilterHashtable @{
    LogName='Application'
    Id=1000
    StartTime=$boot
} -ErrorAction SilentlyContinue |
Select TimeCreated,@{N='Data';E={$_.Properties.Value -join ' | '}} |
Where-Object { $_.Data -match 'IplirControl|iplayer|TAO_PI' } |
Format-List