WinBatch® Technical Support Forum

All Things WinBatch => WinBatch => Topic started by: pamsniffer on December 06, 2017, 01:51:11 AM

Title: powershell monitoring
Post by: pamsniffer on December 06, 2017, 01:51:11 AM
Hi,

Is there a way to minitor powershell command's with winbatch

Pam
Title: Re: powershell monitoring
Post by: td on December 06, 2017, 06:21:06 AM
I suppose it would depend on what you mean by "monitor".
Title: Re: powershell monitoring
Post by: pamsniffer on December 08, 2017, 08:01:52 AM
when some run a powershell command remotely that is monitored what is running
.
Title: Re: powershell monitoring
Post by: stanl on December 08, 2017, 08:41:21 AM
If you can run tListProc() remotely you could look for powershell.exe. It may get a little more complicated to determine an exact .ps1 file running.
Title: Re: powershell monitoring
Post by: td on December 08, 2017, 01:24:09 PM
The 'remotely' part would be a problem.  Whether using , the Process Extender, dotNet's process classes or WMI,  it would in some cases require that specific remote services are running and in all cases special permissions.