IAmStoxe / PoshHarvestPy

Simple utility to extract the powershell history of all users

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

PoshHarvestPy

Simple utility to extract the powershell history of all users

Run it as admin and it will loop all user directorys in C$\Users\ and extract all of the PowerShell history if accessable (fs permissions) and export it to cwd as a json file named after the respective profile name.

About

Simple utility to extract the powershell history of all users


Languages

Language:Python 100.0%