Monitoring command line executions

Monitoring command line executions: A new feature coming to WLS is the ability to monitor commands executed at the command prompt. Using methods similar to Volatility’s and Extracting Windows Cmd Line Details from Physical Memory (pdf), commands and their associated cmd.exe PID can now be logged in near real-time.