PowerShell Get-ADUser help

[storalta]

I'm having some problems with a PowerShell script I'm writing. What the script does is pull events from the event log and send an email to the user. Everything works fine except the portion of the script where it grabs the user. 

$New_GrpUser = $event.Event.EventData.Data[0]."#text"

It grabs the user successfully, but uses the entire CN. 

CN=<redacted>,OU=Users,OU=Accounting,OU=<redacted>,DC=<redacted>,DC=local

I've tried the following with no success.

$New_GrpUser = $event.Event.EventData.Data[0]."#text"
$New_User = Get-ADUser -Filter { cn -eq $New_GrpUser } -Properties name

Can anybody help with getting the Name property from New_GrpUser? Here's the entire script.

 

$CurrTime = (get-date) - (new-timespan -hour 3)
Get-WinEvent -FilterHashtable @{LogName="Security";ID=4728;StartTime=$CurrTime}| Foreach {
$event = [xml]$_.ToXml()
if($event)
{
    $CurrTime = Get-Date $_.TimeCreated -UFormat "%Y-%d-%m %H:%M:%S"
    $New_GrpUser = $event.Event.EventData.Data[0]."#text"
    $New_User = Get-ADUser -Filter { cn -eq $New_GrpUser } -Properties name
    $AD_Group = $event.Event.EventData.Data[2]."#text"
    $AdminWhoAdded = $event.Event.EventData.Data[6]."#text"
    $dc = $event.Event.System.computer

Send-MailMessage -SmtpServer SMTPSERVER -From smtp@example.com -To admin@example.com -Subject "$New_User has been added to the $AD_Group group" -Body "Added by $AdminWhoAdded" -Priority High
}
}

 

Edited April 15, 2020 by Jason S.
removed PII

[storalta]

I was able to get this to work. For those interested, here's the change required.

 

$New_GrpUser = $event.Event.EventData.Data[0]."#text"
$New_GrpUser = $New_GrpUser -replace "cn=", '' -replace "\\", '' -replace ",OU=.*", ''