Skip to content

Windows: Privilege Escalation - Recently accessed files and executed commands

Check recently accessed files/executed commands. Mostly (default) our console history will be saved in

C:\Users\<account_name>\AppData\Roaming\Microsoft\Windows\PowerShell\PSReadline\ConsoleHost_history.txt . 
Last update: 2023-04-23
Created: April 23, 2023 19:52:08