PowerShell: Securing Windows Environments
1h 15mIntermediate2022-12-08
Authors
Robert McMillen
35+ Certifications, Networking Consultant, Consultant for U.S. Government
Course details
PowerShell is a task automation and configuration management program that helps IT staff monitor threats and perform important security functions. It’s also a handy way to improve efficiency and enhance outcomes in system administration. In this course, PowerShell expert Robert McMillen provides an overview of how to use PowerShell to secure your infrastructure and create a safer, more effective working environment.
Explore the security implications and potential risks of using PowerShell, with tips and strategies to help you troubleshoot common problems. By the end of this course, you’ll be prepared to leverage the built-in tools of PowerShell to prevent and detect malicious activity in any Windows environment.
Note: This course is based on security recommendations from the National Security Agency (NSA) to secure a Windows network according to specific firewall rules.
Explore the security implications and potential risks of using PowerShell, with tips and strategies to help you troubleshoot common problems. By the end of this course, you’ll be prepared to leverage the built-in tools of PowerShell to prevent and detect malicious activity in any Windows environment.
Note: This course is based on security recommendations from the National Security Agency (NSA) to secure a Windows network according to specific firewall rules.
Skills covered
PowerShellIT AutomationNetwork SecurityCybersecurityNetwork and System AdministrationMicrosoftDeep Dive (X:Y)
Concepts
0. Introduction
- 01 - Secure your Windows environment
1. PowerShell Use
- 02 - PowerShell capabilities
- 03 - PowerShell access in various operating systems
- 04 - Upgrading PowerShell
- 05 - PowerShell releases and future features
2. PowerShell Abuse Detection
- 06 - Detecting a malicious PowerShell user with logging
- 07 - Deep script block logging (DSBL)
- 08 - Over-the-shoulder (OTS) transcription
- 09 - Module logging
- 10 - Locating obfuscation
3. Built-in Tools for PowerShell Protection
- 11 - Firewall rules for PowerShell use
- 12 - Windows Defender Antimalware capabilities
- 13 - Securing PowerShell with AppLocker
4. Preventive Security for PowerShell
- 14 - PowerShell Remoting security
- 15 - Enabling or disabling PowerShell Remoting
- 16 - PowerShell security best practices
- 17 - PowerShell execution policy
- 18 - Just Enough Administration setup
- 19 - Just Enough Administration demo