⌘Ctrlk

Security References
Digital Forensics
- Windows
  - Forensics
    Program Execution
    Memory
    Network Log
    Windows Event Logs
    Login Events
    Windows Admin Share
    PowerShell Remoting
    Source System Artefacts
    Persistence
  - Lateral Movement
- SANS RED Poster

Powered by GitBook

On this page

Digital Forensics
Windows
Forensics
Windows Event Logs
PowerShell Remoting

Source System Artefacts

Event Logs

wsmprovehost is powershell remoting

PreviousPowerShell Remoting NextPersistence

Last updated 1 year ago