AUDIT_POWERSHELL

---

This job template is designed to enable PowerShell auditing on target endpoints.

Job Metadata
Name	AUDIT_POWERSHELL-TEMPLATE
Plugin Selection
📷 Collectors	Custom Plugins: 262 - [🔧Config Info] Set Audit Policy (Win)
	Built-in Plugins:
⛙ Transports	WMI Transport (if Windows targets + credentials available) SMB Transport (if Windows targets + credentials available)
🔍 Analyzers	Elasticsearch Analyzer
⛭ Miscellaneous	Audit Policy Toggle: Enable Auditing	✔
	Audit Policy Toggle: PowerShell - Module Logging	✔
	Audit Policy Toggle: PowerShell - Scriptblock Logging	✔