Glossary: Modern Vulnerabilities, Malware and Physical Attacks
PowerShell script block logging
Also written: event ID 4104, script block logging
A Windows feature that records the text of every PowerShell script that runs as event ID 4104, with encoded commands shown decoded.