---

Get-WinEvent -LogName "Security" -FilterXPath "*[System[EventID=6273]]" -MaxEvents 5 |
    ForEach-Object {
        "=== $($_.TimeCreated) ==="
        $x = [xml]$_.ToXml()
        $x.Event.EventData.Data | ForEach-Object { "{0} = {1}" -f $_.Name, $_."#text" }
    }