plan9-grep.1 -E '^\$.*Add-Content' powershell.evtx.log
search a file for a pattern
source manpages: plan9-grep