see https://www.malwarearchaeology.com/s/Windows-PowerShell-Logging-Cheat-Sheet-ver-Sept-2018-v22.pdf And also answers in this thread: https://twitter.com/Hexacorn/status/1123354761653301248