Unit 6: PowerShell for defenders · Lesson 5 of 7 · 18 min Pro
Reading script block logs
Use event 4104 to read the PowerShell that the hidden encoded command really ran.
Unit 6: PowerShell for defenders · Lesson 5 of 7 · 18 min Pro
Use event 4104 to read the PowerShell that the hidden encoded command really ran.
Unit 6: PowerShell for defenders · Lesson 5 of 7 · 18 min Pro
Use event 4104 to read the PowerShell that the hidden encoded command really ran.
Pro opens every lesson in Windows and Active Directory Basics and the other courses, with unlimited lab machine time and certificates.