One of the best new features in PowerShell 7 is the ability to perform parallel execution of script blocks, which can drastically reduce the amount of time it takes to process ForEach-Object loops.

Deep Script Block Logging, which provides a record of PowerShell activities. Module Logging, which collects PowerShell "pipeline execution details." Over-the-Shoulder Transcription, ...

Detecting malicious PowerShell use. Recording PowerShell activity and monitoring the logs are two recommendations that could help administrators find signs of potential abuse.

Monitoring PowerShell can be done with Deep Script Block Logging (DSBL), transcription of activities in the CLI, and logging for modules.