get-winevent -Filterhashtable @{LogName='Application';StartTime=(Get-Date).AddDays(-90);EndTime=(Get-Date);Level=2}
get-winevent -Filterhashtable @{LogName='System';StartTime=(Get-Date).AddDays(-90);EndTime=(Get-Date);Level=2}