Path: blob/master/payloads/library/incident_response/Global-Powershell-Logging/README.md
2971 views
Global Powershell Logging and Transcription
SYNOPSIS
Log all Powershell input and output from each PS process to a text file in the Documents/WindowsPowerShell
folder.
WHY?
I developed this small Powershell script to quickly setup PS transcription and log all future Powershell process transcripts. Useful for recording any PS activity on Windows systems.
USAGE
Replace
https://yourserver.com/rawfile/Global-Powershell-Logging.ps1
on line 9 with the URL to your own hosted .ps1 scriptRun once to enable logging
Check transcript files in
Documents/WindowsPowerShell
folderRun once more to remove logging
NOTE
Admin Permissions required for setting execution policies and registry keys.
THIS SCRIPT IS INTENDED FOR USE ON SYSTEMS YOU OWN OR HAVE BEEN GIVEN PERMISSION TO USE!