Samples/Event Filters/ConfigMgr/Event Filter - ConfigMgr - Collection Deleted.ps1
# EXAMPLE for PowerEvents PowerShell module available on http://powerevents.codeplex.com
# Author: Trevor Sullivan
# Date: 11/22/10
# Brief: This example shows how to use PowerEvents to create a WMI event filter that detects the deletion of a System Center Configuration Mananger (ConfigMgr) collection.
# This example assumes that the ConfigMgr site code is 'LAB' and the script is being executed on the primary site server.
# Note: This is not a complete working sample of the PowerEvents module. This only shows how to create an event filter.
# A fully functioning sample requires an event consumer, to respond to the events, as well as a binding between the filter and consumer.
New-WmiEventFilter -Name ConfigMgrCollectionDeleted -EventNamespace root\sms\site_lab -Query "select * from __InstanceDeletionEvent within 2 where TargetInstance ISA 'SMS_Collection'"