Quick triage of MacOS history/session files and PowerShell script-block logs (4104).
-
Updated
Nov 29, 2025 - PowerShell
Quick triage of MacOS history/session files and PowerShell script-block logs (4104).
This case, centered on a PowerShell download cradle, illustrates one of the most common but under-analyzed threats in modern enterprise environments.
Add a description, image, and links to the script-block-logging topic page so that developers can more easily learn about it.
To associate your repository with the script-block-logging topic, visit your repo's landing page and select "manage topics."