powershell-scripts/Audit Compromised User Activities from a Specific Session