Skip to content
PowerShellparser

Posts tagged: #velociraptor

← Back to all posts
How to Collect PowerShell Logs, Transcripts and History
Acquire PowerShell event logs, PSReadLine history and transcripts from a live host, a triage collection or a disk image — with copy-paste commands and gotchas.
powershellacquisitionkapevelociraptor