Ops 201 Reading 07 - CamBerry1/reading-notes GitHub Wiki
Programming languages like Python, Java, etc are mostly used for development and creation. Powershell is an interpreted language for manipulation within a system.
Powershell pushes around structed data, while Bash pushes text. Bash is typically Linux and Powershell is typically windows. Powershell is supported on nearly every popular platform.
Top 5 reasons in support of powershell
- Automation
- Accuracy
- Versatility
- Commuinity
- Relevancy
Powershell is increasingly being used for malicious purposes. Instead of installing an executable, it can be used to inject code directly into the memory of a system, making it harder to track down and eliminate. A powershell attack can be disguised as email attachements, which will run code directly into the system.
How to protect from powershell attacks.