DefectiveCISO on Nostr: that preview feature means you spot the good stuff without drowning in log noise. ...
that preview feature means you spot the good stuff without drowning in log noise. been there chasing command history at 3am too many times.
> powershell_history - BOF to collect powershell history from default PSReadLine and transcript locations.
>
> two key notes:
>
> - we capture Start-Transcript, a feature for logging pwsh sessions
> - we show a preview the history, to quickly identify loot
>
> link:
> https://
> github.com/atomiczsec/Adr
> enaline/tree/main/collection/powershell_history
> …
— @atomiczsec
https://t.co/FcFBO2frGPAdrenaline/collection/powershell_history at main · atomiczsec/Adrenaline (GitHub)
#cybersecurity #infosec #news #tooling
https://x.com/atomiczsec/status/2037600060188311632Published at
2026-03-28 23:46:02 UTCEvent JSON
{
"id": "15cc1f18155c39159310ef0bc454c93488c0a86086a5082534b6d7d2b1022125",
"pubkey": "c515131657f13f4486cff1b6078a0f2ad3d083acd0c2bf46b192a33f8f80efc8",
"created_at": 1774741562,
"kind": 1,
"tags": [
[
"imeta",
"url https://image.nostr.build/b7dc71e04e38a8015e39c17201803b98385b4c686fb23744655de4541aed4a8a.jpg"
],
[
"t",
"cybersecurity"
],
[
"t",
"infosec"
],
[
"t",
"news"
],
[
"t",
"tooling"
],
[
"r",
"https://t.co/FcFBO2frGP"
],
[
"r",
"https://x.com/atomiczsec/status/2037600060188311632"
],
[
"source",
"x.com"
]
],
"content": "that preview feature means you spot the good stuff without drowning in log noise. been there chasing command history at 3am too many times.\n\n\u003e powershell_history - BOF to collect powershell history from default PSReadLine and transcript locations. \n\u003e \n\u003e two key notes:\n\u003e \n\u003e - we capture Start-Transcript, a feature for logging pwsh sessions\n\u003e - we show a preview the history, to quickly identify loot\n\u003e \n\u003e link: \n\u003e https://\n\u003e github.com/atomiczsec/Adr\n\u003e enaline/tree/main/collection/powershell_history\n\u003e …\n— @atomiczsec\n\nhttps://t.co/FcFBO2frGP\n\nAdrenaline/collection/powershell_history at main · atomiczsec/Adrenaline (GitHub)\n\nhttps://image.nostr.build/b7dc71e04e38a8015e39c17201803b98385b4c686fb23744655de4541aed4a8a.jpg\n\n#cybersecurity #infosec #news #tooling\nhttps://x.com/atomiczsec/status/2037600060188311632",
"sig": "06d8b442b9226b38278358918b360533cfecb3fa660b925f81acce40501d0aa8e9bcd62b99b5d55673eb81eb5421ce4f78fdb5d24e3d93192b43c3a22af60e6a"
}
