Skip to content

Glossary: Modern Vulnerabilities, Malware and Physical Attacks

PowerShell script block logging

Also written: event ID 4104, script block logging

A Windows feature that records the text of every PowerShell script that runs as event ID 4104, with encoded commands shown decoded.

Where the book teaches it

Related terms

PowerShellFileless malware