Check PowerShell history

Read the PSReadline history file to see commands previously run by the user. A hit is plaintext credentials, connection strings, or paths typed on a prior session.