Loging command

Tagged: 

This topic contains 2 replies, has 2 voices, and was last updated by Profile photo of Rafal Niznik Rafal Niznik 1 week, 2 days ago.

  • Author
    Posts
  • #72742
    Profile photo of Rafal Niznik
    Rafal Niznik
    Participant

    Hi Guys

    Can anyone advice how to set Powershell logs.
    I need history of all PS commands there were used by all users on selected workstatios
    I need those commands to be exported to the file with the following:
    Id CommandLine ExecutionStatus Username Workstation StartExecutionTime EndExecutionTime

    Thanks for your help
    Regards
    Raf

  • #72752
    Profile photo of Don Jones
    Don Jones
    Keymaster

    Start here: https://www.fireeye.com/blog/threat-research/2016/02/greater_visibilityt.html

    Lee Holmes, one of the PowerShell team members, has also written on this (Google, "Lee Holmes PowerShell Logging"). He did a session on it at PowerShell Summit 2015 or 2016, and the videos would be at YouTube.com/PowerShellorg.

    • #72803
      Profile photo of Rafal Niznik
      Rafal Niznik
      Participant

      Thanks Don this is what I need it 🙂

You must be logged in to reply to this topic.