Course 9:Implementing PowerShell Security Best Practice 2019

Understanding Windows PowerShell Security: A Comprehensive Guide

This course provides IT professionals and power users with the knowledge and skills to effectively manage and secure Windows operating systems and applications using Windows PowerShell. Learn to harness the power of PowerShell while minimizing security risks and defending against potential threats.

Key Topics Covered:

• PowerShell Fundamentals: Master the core concepts of PowerShell, including its architecture, different editions and versions. Gain practical experience with FullCLR vs. CoreCLR, learn how to install PowerShell Core on Windows, Linux, and macOS, and effectively manage PowerShell profiles.

• PowerShell Operational Security: Enhance your system's security by leveraging built-in PowerShell features. Learn to:

  • Upgrade execution policy for stronger network security.
  • Work with code signing certificates to ensure script authenticity.
  • Authenticate script files using authorized certificates.

• Implementing PowerShell-based Security: Proactively strengthen your environment with these techniques:

  • PowerShell Desired State Configuration (DSC): Prevent unintended configuration changes.
  • Just Enough Administration (JEA): Implement the principle of least privilege for remote administration.
  • Windows PowerShell Logging: Track and audit events to detect potential exploit attempts.

• Windows PowerShell-based Exploits & Mitigation: Understand the threat landscape from a Red Team perspective. Explore common Windows PowerShell attack techniques used by hackers to:

  • Install malicious software.
  • Conduct reconnaissance.
  • Establish persistence.
  • Promote lateral movement.
  • Review security tools for penetration testing, forensics, and reverse engineering.
  • Learn Blue Team recommended technologies for defense-in-depth against PowerShell attacks.

• Network & Firewall Management: Develop practical skills in network security:

  • Write port scanner scripts.
  • Test network servers.
  • Secure ports using firewall configurations (4 different methods).

• Domain Inventory & Management: Gain proficiency in managing Active Directory environments:

  • Detect suspected profiles in domain PCs.
  • Deploy code for profile detection.
  • Create reports of AD groups, users, and GPOs.
  • Write scripts to manage registry keys and values.

• Domain Shares Security: Learn to secure network shares:

  • Manage domain server shares.
  • Secure shared directories.
  • Implement network share security measures.

Course Outcomes:

By the end of this course, you will possess the skills necessary to enroll in advanced courses like "Hack Windows Server 2019 using PowerShell & WMI" and contribute to the development of complex PowerShell-based tools. You'll be able to write sophisticated scripts with 3500+ lines of code.