Potential PowerShell Console History Access Attempt via History File

Last updated on:

In this page

About the rule

Rule Type

Standard

Rule Description

Detects potential access attempts to the PowerShell console history directly via history file (ConsoleHost_history.txt).

Severity

Trouble

Detection

Execution Mode

realtime

Log Sources

Windows

Author

@Luc Génaux