PowershellHids DEMO 2015.11.18 www.xtiger.net Set-ExecutionPolicy Unrestricted New-EventLog -LogName application -source powershell-hids .\PowershellHids.ps1