May 29, 2024
247
Yes, in this example below, an elevated command prompt (perhaps elevated by Self Elevate)… you can see the command “net stop spooler” logged in the event log as seen here.
TIP: If you are not seeing this be sure to upgrade to latest CSE.
Note that internal commands like: DIR or SET won’t be logged; the command must be an external command.