PowerShell: Securing Windows Environments

1h 15mIntermediate2022-12-08

Authors

Robert McMillen

35+ Certifications, Networking Consultant, Consultant for U.S. Government

Course details

PowerShell is a task automation and configuration management program that helps IT staff monitor threats and perform important security functions. It’s also a handy way to improve efficiency and enhance outcomes in system administration. In this course, PowerShell expert Robert McMillen provides an overview of how to use PowerShell to secure your infrastructure and create a safer, more effective working environment.

Explore the security implications and potential risks of using PowerShell, with tips and strategies to help you troubleshoot common problems. By the end of this course, you’ll be prepared to leverage the built-in tools of PowerShell to prevent and detect malicious activity in any Windows environment.

Note: This course is based on security recommendations from the National Security Agency (NSA) to secure a Windows network according to specific firewall rules.

Skills covered

PowerShellIT AutomationNetwork SecurityCybersecurityNetwork and System AdministrationMicrosoftDeep Dive (X:Y)

Concepts

0. Introduction

01 - Secure your Windows environment

1. PowerShell Use

02 - PowerShell capabilities
03 - PowerShell access in various operating systems
04 - Upgrading PowerShell
05 - PowerShell releases and future features

2. PowerShell Abuse Detection

06 - Detecting a malicious PowerShell user with logging
07 - Deep script block logging (DSBL)
08 - Over-the-shoulder (OTS) transcription
09 - Module logging
10 - Locating obfuscation

3. Built-in Tools for PowerShell Protection

11 - Firewall rules for PowerShell use
12 - Windows Defender Antimalware capabilities
13 - Securing PowerShell with AppLocker

4. Preventive Security for PowerShell

14 - PowerShell Remoting security
15 - Enabling or disabling PowerShell Remoting
16 - PowerShell security best practices
17 - PowerShell execution policy
18 - Just Enough Administration setup
19 - Just Enough Administration demo