Search logs on device, in the default location (C:\Windows\System32\winevt\Logs)
Get-WinEvent -FilterHashtable @{Logname="Security"; id=4624} | Where {$_.Message -match "test content"}
Search logs that are in another location (C:\Path-To-Exported)
Get-WinEvent -FilterHashtable @{Path="C:\Path-To-Exported\Security*.evtx"; id=4624} | Where {$_.Message -match "test content"}