You enable and configure PowerShell Script Block Logging.
You need to view which script blocks were executed by using Windows PowerShell scripts.
What should you do?
A.
View the Microsoft-Windows-PowerShell/Operational event log.
B.
Open the log files in %LocalAppData%\\Microsoft\\Windows\\PowerShell.
C.
View the Windows PowerShell event log.
D.
Open the log files in %SYSTEMROOT%\\Logs.
Explanation:
https://docs.microsoft.com/en-us/powershell/wmf/5.0/audit_script
After you enable detailed script tracing, Windows PowerShell logs all script blocks to the event log, MicrosoftWindows-PowerShell/Operational.
