Get Rename History

Name:

Get Rename History

Category:

Event Logs

Description: 

Displays all events showing the target computer's name change(s).

Required Software:

PowerShell

Command:

Write-Output "Examine System log for name changes on $(Computer:TARGET)"

Get-WinEvent -ComputerName $(Computer:TARGET) -LogName System -ErrorAction SilentlyContinue | 
 where {$_.ID -eq 6011} | 
 Format-List -property TimeCreated, LogName, ProviderName, LevelDisplayName, ID, Message

More Info/Usage:

Get-WinEvent