Search event logs for file system access

Question

I'm looking to create a script that will allow me to search Windows 2012 security event logs for access to specific folders.  Ideally it would allow the granularity to search for read access events (4663) and specify specific users to view.  One
example would be to show events for drive F:\ where the folder name is JSmith (including subfolders) and the username is not JSmith.
I've tried something like this, but can't see how to filter.
Get-EventLog security | ? {$_.Message.contains("F:\JSmith")}

Answer 1

Is the match explicit?  How can I use wildcard?  How can I exclude events?
I recommend asking a search engine and doing some initial research. Here's a starter:
https://technet.microsoft.com/en-us/library/hh849682.aspx
http://blogs.msdn.com/b/powershell/archive/2009/06/11/windows-event-log-in-powershell-part-ii.aspx
http://blogs.technet.com/b/ashleymcglone/archive/2013/08/28/powershell-get-winevent-xml-madness-getting-details-from-event-logs.aspx
http://blogs.technet.com/b/heyscriptingguy/archive/2011/01/24/use-powershell-cmdlet-to-filter-event-log-for-easy-parsing.aspx
https://richardspowershellblog.wordpress.com/2009/03/08/get-winevent/
Don't retire TechNet! -
(Don't give up yet - 13,225+ strong and growing)