# Eventlog Microsoft-Windows-PowerShell%4Operational.evtx

Invoke-command -ComputerName esflovian -ScriptBlock {
Get-Module -Listavailable Microsoft* | Select Name, LogPipelineExecutionDetails}

Invoke-command -ComputerName esflovian -ScriptBlock {
powershell.exe -encodedcommand WwBjAG8AbgBzAG8AbABlAF0AOgA6AFcAcgBpAHQAZQBMAGkAbgBlACgAIgBTAG8AbQBlAHQAaABpAG4AZwAgAG0AYQBsAGkAYwBpAG8AdQBzACAAaABhAHAAcABlAG4AaQBuAGcAIQAiACkA}


# Logs remote Auslesen ( Nur Level "Warning = Remote Befehle)
$created = Get-Winevent -FilterHashtable @{ ProviderName="Microsoft-Windows-PowerShell"; Id = 4104 ; Level = 3}# Select-Object  }
$sortedScripts = $created | sort { $_.Properties[0].Value }
-join ($sortedScripts | % { $_.Properties[2].Value })|Select-Object -First 1