diff --git a/post exploitation/docs/windows/powershell_logs.md b/post exploitation/docs/windows/powershell_logs.md
index 15a6f53..0f7a819 100644
--- a/post exploitation/docs/windows/powershell_logs.md	
+++ b/post exploitation/docs/windows/powershell_logs.md	
@@ -1,5 +1,11 @@
 # Powershell Logs
 
+## Powershell User History
+
+```sh
+cd $env:APPDATA\Microsoft\Windows\PowerShell\PSReadLine\ConsoleHost_history.txt
+```
+
 ## Transcript Logs
 
 * Enable via