Powershell Logs Cleared
Query identity the deletetion of the file ConsoleHost_history.txt, the file stores the process command line history of Powershell
Microsoft Sentinel (KQL)

Query identity the deletetion of the file ConsoleHost_history.txt, the file stores the process command line history of Powershell

Already have an account?