What method does the article describe for exporting PowerShell command history from a process that can receive keyboard input?
The attacker simulates keyboard input by enumerating windows, finding the target PowerShell process by PID, and sending keystrokes such as `Get-History|export-csv $env:temp\history.csv`. Special characters require pressing the Shift key using `keybd_event` combined with `PostMessage`. This technique enables exporting history without direct console access—as detailed in the full article on obtaining PowerShell command history.
keyboard simulationPostMessageexport historyvirtual-key codespenetration testing