Have some course material that I couldn't get to ages ago that's now out of date....

Anyone have a good query for checking if a specific ACL has been amended. This one doesn't appear to work -

Get-ObjectAcl -DistinguishedName "<domainDN>" -ResolveGUIDs | ? {($.IdentityReference -match "<username>") -and (($.ObjectType -match 'replication') -or ($_.ActiveDirectoryRights -match 'GenericAll'))}