2023-09-13 by mttaggart
Windows Config Manager CCM.exe runs b64-encoded powershell.
The commands can be large enough to take multiple Event 4104 entries.
Documentation