Quick Wins

Powershell History

# Powershell 5.0 in Windows 10, PowerShell stores command history to the file

# Checking Powershell History
PS C:\dotpirate> Get-History


# PowerShell v5, v5.1, and v7 is included

# Retrieve the history from PSReadline
PS C:\dotpirate> (Get-PSReadLineOption).HistorySavePath

PS C:\dotpirate> gc (Get-PSReadLineOption).HistorySavePath

type C:\Users\dotpirate\AppData\Roaming\Microsoft\Windows\PowerShell\PSReadLine\ConsoleHost_history.txt

cat "C:\Users\dotpirate\AppData\Roaming\Microsoft\Windows\PowerShell\PSReadLine\ConsoleHost_history.txt"

Always Installed Elevated

Check if its enabled (if 0x1 appears we are good to go )