KenanFeb 16, 2023
Eric Capuano

Quick blog post on #PowerShell forensic artifact: ConsoleHost_History.txt

Check it out: https://ecapuano.substack.com/p/powershell-artifact-consolehost_historytxt?sd=pf

#DFIR #ThreatHunting

PowerShell Artifact - ConsoleHost_History.txt

A great way to understand adversary PowerShell activity on a system.

Eric’s Substack
Feb 16, 2023 at 4:48pmWeb