# Get-WinEvent

# Find the last 10 quarantine events

Get-WinEvent -LogName "Microsoft-Windows-Windows Defender/Operational" |
  Where-Object { $_.Message -like "*quarantine*" } |
  Select-Object TimeCreated, Id, Message -First 10