PowerShell Data Collector

The PowerShell Data Collector provides PowerShell script exit from Enterprise Auditor. It has configuration options for creating and configuring a PowerShell query. This data collector is a core component of Enterprise Auditor and is available with all Enterprise Auditor licenses.

Protocols

• PowerShell

Ports

• Randomly allocated high TCP ports

Permissions

• Member of the Domain Administrators group (if targeting domain controllers)
• Member of the Local Administrators group

PowerShell Query Configuration

The PowerShell Data Collector is configured through the PowerShell Data Collector Wizard, which contains the following pages:

• Welcome
• PowerShell: Edit Query
• PowerShell: Options
• PowerShell: Sample Server
• PowerShell: Results
• PowerShell: Summary

Check the Don't display this page the next time box to hide the Welcome page. The wizard saves this setting with your configuration changes.