SELECT QUANTIZE(TimeGenerated, 86400) AS Day, COUNT(*) AS [Logons]
FROM SECURITY
WHERE EventID = 4625
GROUP BY Day
ORDER BY Day ASC


ORDER BY [Logons] DESC


SELECT c-ip As Machine,
REVERSEDNS(c-ip) As Name,
COUNT(*) As Hits
FROM '[LOGFILEPATH]'
GROUP BY Machine ORDER BY Hits DESC


INTO '[OUTFILEPATH]\Hostnames.CSV'
FROM '[LOGFILEPATH]'


.\hostnames.ps1 -OutFile c:\temp\hostnames.csv