I use signed PowerShell scripts within my infrastructure and log all PowerShell activity via Windows EventLog. Sadly it seem that windows does not log a hash or fingerprint of signed scripts or even any information about the status of a script as long as I do not prohibit unsigneds scripts from executing. I'm not quite ready to do that and had hoped to use the logging to find where unsigned scripts are in use.
Is there a way to make widows log not only sript execution but also more information about that script like is it signed, its hash or fingerprint and the validity of that signature or the signature itself?
Many thanks in advance.