Get-WinEvent -LogName "Microsoft-Windows-AppLocker/EXE and DLL" -MaxEvents 100 |
    Where-Object {
        $_.Id -eq 8004 -and
        $_.TimeCreated -gt (Get-Date).AddMinutes(-30)
    } |
    Select-Object TimeCreated, Message |
    Format-List