Help for this page
$aevents = $Wmi->ExecQuery("SELECT * FROM $Win32_Class WHERE LogFile= +'Security' AND Eventcode=560")
$aevents = $Wmi->ExecQuery("SELECT * FROM $Win32_Class WHERE LogFile= +'Security' AND Eventcode=560",,'48')