Loging command

PowerShell Help
#1

Hi Guys

Can anyone advice how to set Powershell logs.
I need history of all PS commands there were used by all users on selected workstatios
I need those commands to be exported to the file with the following:
Id CommandLine ExecutionStatus Username Workstation StartExecutionTime EndExecutionTime

Thanks for your help
Regards
Raf

#2

Start here: https://www.fireeye.com/blog/threat-research/2016/02/greater_visibilityt.html

Lee Holmes, one of the PowerShell team members, has also written on this (Google, “Lee Holmes PowerShell Logging”). He did a session on it at PowerShell Summit 2015 or 2016, and the videos would be at YouTube.com/PowerShellorg.

#3

Thanks Don this is what I need it :slight_smile: