PS C:\Windows\system32> Get-CimInstance Win32_Process | Select-Object Name, CommandLine, Path | Where-Object {
_.CommandLine -like “*bypass*” -or 
env:TEMP, 
_.LastWriteTime -gt (Get-Date).AddDays(-1) } | Select-Object FullName, LastWriteTime, Length
Get-WinEvent -LogName “Windows PowerShell” -MaxEvents 20 | Where-Object {
_.LevelDisplayName -eq “Error”} | Select-Object TimeCreated, Id, Message | Format-List
Volevo invitarTi a bussare, prima di entrare.