viewpoint-particle

Author Topic: powershell monitoring  (Read 56 times)

pamsniffer

  • Newbie
  • *
  • Posts: 30
powershell monitoring
« on: December 06, 2017, 01:51:11 am »
Hi,

Is there a way to minitor powershell command's with winbatch

Pam

td

  • Tech Support
  • *****
  • Posts: 2223
    • WinBatch
Re: powershell monitoring
« Reply #1 on: December 06, 2017, 06:21:06 am »
I suppose it would depend on what you mean by "monitor".
"Success is a lousy teacher. It seduces smart people into thinking they can't lose."
  - Bill Gates


pamsniffer

  • Newbie
  • *
  • Posts: 30
Re: powershell monitoring
« Reply #2 on: December 08, 2017, 08:01:52 am »
when some run a powershell command remotely that is monitored what is running
.

stanl

  • Pundit
  • *****
  • Posts: 668
Re: powershell monitoring
« Reply #3 on: December 08, 2017, 08:41:21 am »
If you can run tListProc() remotely you could look for powershell.exe. It may get a little more complicated to determine an exact .ps1 file running.
 

td

  • Tech Support
  • *****
  • Posts: 2223
    • WinBatch
Re: powershell monitoring
« Reply #4 on: December 08, 2017, 01:24:09 pm »
The 'remotely' part would be a problem.  Whether using , the Process Extender, dotNet's process classes or WMI,  it would in some cases require that specific remote services are running and in all cases special permissions.
"Success is a lousy teacher. It seduces smart people into thinking they can't lose."
  - Bill Gates