Powershell command can help you retrieve all software installation and removal events from the Event Log. The WinEvent option can go through the log files, filter based on source, and show the result.
Attackers are increasingly abusing sanctioned tools to subvert automated defenses. Tracking your Windows fleet’s PowerShell use — especially consultant workstations — can provide early indications of ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results