https://community.splunk.com/t5/Getting-Data-In/Powershell-Logging-and-ingesting-to-Splunk/m-p/496194#M99951 <P>Hello! I am very interested in turning on Powershell logging in my environment and then sending those logs to Splunk. Any good recommendations for articles / URLs for me to start learning how to do this? Thx</P> Sun, 26 Jan 2020 22:11:03 GMT johann2017 2020-01-26T22:11:03Z https://community.splunk.com/t5/Getting-Data-In/Powershell-Logging-and-ingesting-to-Splunk/m-p/496194#M99951 <P>Hello! I am very interested in turning on Powershell logging in my environment and then sending those logs to Splunk. Any good recommendations for articles / URLs for me to start learning how to do this? Thx</P> Sun, 26 Jan 2020 22:11:03 GMT https://community.splunk.com/t5/Getting-Data-In/Powershell-Logging-and-ingesting-to-Splunk/m-p/496194#M99951 johann2017 2020-01-26T22:11:03Z https://community.splunk.com/t5/Getting-Data-In/Powershell-Logging-and-ingesting-to-Splunk/m-p/496195#M99952 <P><A href="https://www.jpcert.or.jp/present/2018/20171109codeblue2017_en.pdf">Pursue the Attackers _ Identify and Investigate Lateral Movement Based on Behavior Pattern</A></P> <P>check P71 , <CODE>wineventlog</CODE></P> Mon, 27 Jan 2020 06:25:31 GMT https://community.splunk.com/t5/Getting-Data-In/Powershell-Logging-and-ingesting-to-Splunk/m-p/496195#M99952 to4kawa 2020-01-27T06:25:31Z