PowerShell Security: Defending the Enterprise from the ...
PowerShell Security:
Defending the Enterprise from the
Latest Attack Platform
Sean Metcalf (@Pyrotek3)
s e a n [@]
ABOUT
?Founder Trimarc, a security company.
?Microsoft Certified Master (MCM) Directory Services
?Microsoft MVP
?Speaker: BSides, Shakacon, Black Hat, DEF CON, DerbyCon
?Security Consultant / Security Researcher
?Own & Operate
(Microsoft platform security info)
Sean Metcalf (@Pyrotek3)
2
AGENDA
?PowerShell Overview & Capability
?Traditional PowerShell Defenses
?Real-World PowerShell Attacks
?PowerShell Attack Tools
?Detecting PowerShell Attacks
?Mitigation & Prevention
?PowerShell v5
Detecting Offensive PowerShell Attack Tools
Sean Metcalf (@Pyrotek3)
3
Sean Metcalf (@Pyrotek3)
4
PowerShell Overview
? Object-based scripting
language based on .Net
technologies.
? Primarily designed in C#.
? ¡°BASH shell for Windows¡±.
? PowerShell can call .Net
directly:
[System.DirectoryServices.A
ctiveDirectory.Forest]::Get
CurrentForest()
? Extensible through imported
code modules which add new
commands.
? Simplifies data access to
standard resources (WMI,
XML, registry, event logs, etc).
? PowerShell.exe (CLI) or
PowerShell_ISE.exe (ISE GUI).
? Approaching its 10 year
anniversary.
Sean Metcalf (@Pyrotek3)
5
................
................
In order to avoid copyright disputes, this page is only a partial summary.
To fulfill the demand for quickly locating and searching documents.
It is intelligent file search solution for home and business.
Related searches
- where is the building from the office
- the building from the office
- calculate the deviation from the mean
- choose the nonmetallic elements from the list
- from the abundance of the heart
- from the abundance of the heart luke
- from the abundance of the heart kjv
- identify the rural settlement pattern or rural survey pattern from the photo
- calculate the radius from the circumference
- activity 1 1 match the word from the first column with the correct definition
- the semicircle from the scale drawing will be cut in full size from a piece of f
- powershell how to log output from exes