This is expected behavior @marten_cureton we catch process start events but don’t capture the contents of interactive powershell sessions
David
This is expected behavior @marten_cureton we catch process start events but don’t capture the contents of interactive powershell sessions
David