This repository contains a PowerShell script to install Sysmon (System Monitor) on a Windows machine. Sysmon is a Windows system service and device driver that, once installed on a system, remains ...

Add PowerShell Script Block loggin The first, “Turn on Module logging”, records portions of scripts and de-obfuscated code, and will log events to event ID 4103 in the Windows PowerShell log.

A PowerShell script to search for a specific computer in multiple users' Active Directory User-Workstations logon restriction list (Log On To) What is "Active Directory Logon Workstations" In ...

Scrolling through Windows Server DHCP logs in Notepad is a tedious and time-consuming task. Here's how to use PowerShell to make the process a lot easier.