https://github.com/osquery/osquery logo
Title
a

arod

02/02/2021, 11:55 PM
Any idea why I have powershell script logging enabled but I'm not getting anything on
select * from powershell_events;
j

Juan Alvarez

02/08/2021, 12:59 PM
you may want to try tabel
windows_events
instead ? never tried the
powershell_events
one tho
s

SK

02/09/2021, 10:17 AM
Might have something to do depending which PS version you want to monitor? https://twitter.com/S0xbad1dea/status/1285995442896076801?s=20
a

arod

02/09/2021, 7:26 PM
👀 I'll check it out and report back. Thanks @SK