I'm not positive, but I think it is c:\windows\ccm\temp... I saw it in the logs last week while troubleshooting a powershell detection method last week.
I hope that helps, Nash From: [email protected] [mailto:[email protected]] On Behalf Of Daniel Ratliff Sent: Tuesday, December 2, 2014 9:34 AM To: [email protected] Subject: [mssms] Compliance script compiled locally on workstation? At MMS 2014, one of the presentations mentioned a location on a workstation where a PowerShell compliance script is compiled and sits on the workstation while running, but is removed when complete. Does anyone know this location? I think it was C:\windows\....something or other. Daniel Ratliff The information transmitted is intended only for the person or entity to which it is addressed and may contain CONFIDENTIAL material. If you receive this material/information in error, please contact the sender and delete or destroy the material/information.

