added powershell user history

2022-10-27 23:11:38 +02:00 · 2022-10-27 23:11:38 +02:00 · 0916deb7ba
parent def5079664
commit 0916deb7ba
1 changed files with 6 additions and 0 deletions
--- a/exploitation/docs/windows/powershell_logs.md
+++ b/exploitation/docs/windows/powershell_logs.md
@ -1,5 +1,11 @@
 # Powershell Logs

+## Powershell User History
+
+```sh
+cd $env:APPDATA\Microsoft\Windows\PowerShell\PSReadLine\ConsoleHost_history.txt
+```
+
 ## Transcript Logs

 * Enable via