RDP

$event = Get-WinEvent -FilterHashTable @{LogName="security";id=4624}
foreach ($event in $event)
{ 
 if ($event.Properties[8].Value -eq 10)
 { 
 $event.TimeCreated
 $event.Properties[5].Value
 $event.Properties[8].Value
 }
}