powershell monitoring

Started by pamsniffer, December 06, 2017, 01:51:11 AM

Previous topic - Next topic

pamsniffer

Hi,

Is there a way to minitor powershell command's with winbatch

Pam

td

I suppose it would depend on what you mean by "monitor".
"No one who sees a peregrine falcon fly can ever forget the beauty and thrill of that flight."
  - Dr. Tom Cade

pamsniffer

when some run a powershell command remotely that is monitored what is running
.

stanl

If you can run tListProc() remotely you could look for powershell.exe. It may get a little more complicated to determine an exact .ps1 file running.

td

The 'remotely' part would be a problem.  Whether using , the Process Extender, dotNet's process classes or WMI,  it would in some cases require that specific remote services are running and in all cases special permissions.
"No one who sees a peregrine falcon fly can ever forget the beauty and thrill of that flight."
  - Dr. Tom Cade