Enable Power Shell Logging

Introduction

The purpose of the post is to show how to enable logging for powershell on a Windows Client.

Let’s start
Start Menu -> Gpedit -> Click on Edit Group Policy

Then open Computer Configuration -> Administrative Template -> Windows Components -> Find “Windows Powershell” -> Turn on PowerShell Transcription -> Enabled -> Click on Include invocation headers
Click Apply. After that, find Turn on Powershell Script Block Logging
Click on enabled and click apply. Now, click on Turn on Module logging and enable it.
Click on “Show” near Module Names. Then, enter * then hit OK then click Apply.

This is what you should have: