To see the command lines that have been used when processes are started is simple one liner:
Get-CimInstance -ClassName Win32_Process | select Name, CommandLine
If you want to investigate specific processes use the –Filter parameter to restrict the processes