PowerShell: Logging should be enabled

ab3e18c8-5f9b-4a08-8474-ff10619965bd

PowerShell is a sensitive input for threat execution and all PowerShell activity should be logged.

Remediation

Enabling PowerShell Transcription Logging:

https://www.eventsentry.com/blog/2018/01/powershell-p0wrh11-securing-powershell.html#:~:text=Enabling%20Logging

For a quick fix, you can import this registry key from our GitHub repository



bestpractice-desktop
bestpractice-server