explorer125 comments

Repositories
Issues
Comments

Results 2 comments of


                                            explorer125

Detect built-in cmd commands

If I run these commands from PS, would Sysmon detect?

Detect built-in cmd commands

I have enabled script block logging and even if I execute echo from PS (Without it being part of command line parameter), Windows event captures it under event id 4104....