Loging command

This topic contains 2 replies, has 2 voices, and was last updated by  Rafal Niznik 1 year, 1 month ago.

  • Author
  • #72742

    Rafal Niznik

    Hi Guys

    Can anyone advice how to set Powershell logs.
    I need history of all PS commands there were used by all users on selected workstatios
    I need those commands to be exported to the file with the following:
    Id CommandLine ExecutionStatus Username Workstation StartExecutionTime EndExecutionTime

    Thanks for your help

  • #72752

    Don Jones

    Start here: https://www.fireeye.com/blog/threat-research/2016/02/greater_visibilityt.html

    Lee Holmes, one of the PowerShell team members, has also written on this (Google, "Lee Holmes PowerShell Logging"). He did a session on it at PowerShell Summit 2015 or 2016, and the videos would be at YouTube.com/PowerShellorg.

    • #72803

      Rafal Niznik

      Thanks Don this is what I need it 🙂

You must be logged in to reply to this topic.