{ "$schema": "../schema/ime-log-pattern.schema.json", "patternId": "PS-SCRIPT-RESULT", "category": "always", "pattern": "\\[PowerShell\\] User Id = [a-z0-9\\-]+, Policy id = (?[a-z0-9]{8}-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{12}), policy result = (?\\w+)", "action": "scriptCompleted", "parameters": { "scriptType": "platform" }, "description": "Captures the final result (Success/Failed) of a platform PowerShell script execution with its PolicyId.", "enabled": true }