I think it is because commands like dir, ls, cd are internal commands but commands like ping, ipconfig are external commands and they are executable files also (ping.exe, tracert.exe) and they don't create any process. so I think we can't get internal commands logs. If there are any way please let me know ... View more