CmdID

CmdID / PowerShell / Cmdlets / Get

Get-PSReadLineOption

Gets values for the options that can be configured. PowerShell reference

From the PowerShell reference 1 Sigma rule looks for it

Opens CmdID with your command, read as PowerShell. It is read in your browser and sent nowhere.

What it does

from the PowerShell reference, CC BY 4.0

Gets values for the options that can be configured. The Get-PSReadLineOption cmdlet returns the current state of the settings that can be configured by using the Set-PSReadLineOption cmdlet. You can use the returned object to change PSReadLine options. This provides a slightly simpler way to set syntax coloring options for multiple kinds of tokens.

Get-PSReadLineOption [<CommonParameters>]

Get options and their values

Get-PSReadLineOptionIdentify

Its page in the reference: Get-PSReadLineOption.

What looks for it

Sigma process creation rules that name Get-PSReadLineOption
mediumPotential PowerShell Console History Access Attempt via History FileLuc Génaux

See also

Remove-PSReadLineKeyHandler · Get-PSReadLineKeyHandler · Set-PSReadLineOption · Set-PSReadLineKeyHandler