Question about powershell, and a DEFAULT installation of a Universal Forwarder on a Windows Server. In this instance, does Splunk use powershell for any process, assuming no UF configuration other than collecting Windows Events.
I would say no. More interesting is why would you think that?