Reconstruction_PowerShell_History

PowerShell History File

---

Now that I have made lateral movement to the jack user, I can access the PowerShell history file, located by PEAS

There is a CLEARTEXT credential and the user failed to clear the history FlauntHiddenMotion845 Moving on to the Privilege Escalation phase