Get-Process

By

Brian Johnson

Handy for finding if, for example, domain admins are logged in interactively (covered in this podcast episode):

Get-Process -IncludeUserName explorer | Select-Object UserName

If you see a domain admin logged in, use schtasks to queue up an evil task on their behalf!