Don't Miss Out on the Best Specials of the Year Available Now - Top Training, Top Instruction!


To attend this webcast, login to your SANS Account or create your Account.

This webcast has been archived. To view the webcast login into your SANS Portal Account or create an account by clicking the "Get Registered" button on the right. Once you register, you can download the presentation slides below.

Windows PowerShell for Auditors

  • Wednesday, September 06, 2017 at 10:00 PM EDT (2017-09-07 02:00:00 UTC)
  • Clay Risenhoover

You can now attend the webcast using your mobile device!



PowerShell has been around for more than a decade, and is now the Microsoft-preferred tool for performing Windows administration. Its also a very capable platform for developing audit evidence during reviews of Active Directory domains and Windows servers and workstations.

In this webcast, we will cover the basics of running PowerShell commands, discuss techniques for using PowerShell as part of the audit process in Windows environments, and view a number of examples of using PowerShell for solving real-world audit problems.

The topic of this webcast is adapted as a sample of the many important audit tools and techniques covered in the SANS course AUD507: Auditing & Monitoring Networks, Perimeters & Systems.

Speaker Bio

Clay Risenhoover

Clay is the president of Risenhoover Consulting, Inc., an IT management consulting firm based in Durant, Oklahoma. Founded in 2003, RCI provides IT audit and IT management consulting services to clients in multiple sectors. Clay is a licensed Certified Public Accountant (CPA) with the Certified Information Technology Professional (CITP) designation. Since 2013 Clay has been involved with the SANS Institute and is the lead author and instructor for AUD507: Auditing & Monitoring Networks, Perimeters, and Systems, as well as a Faculty Research Advisor (FRA) for the SANS Technology Institute. Learn more about Clay here.

Need Help? Visit our FAQ page or email

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.