PowerShell Automation and Scripting for Cybersecurity

Table of Contents

1. Getting Started with PowerShell
2. PowerShell Scripting Fundamentals
3. Exploring PowerShell Remote Management Technologies and PowerShell Remoting
4. Detection – Auditing and Monitoring
5. PowerShell Is Powerful – System and API Access
6. Active Directory – Attacks and Mitigation
7. Hacking the Cloud – Exploiting Azure Active Directory/Entra ID
8. Red Team Tasks and Cookbook
9. Blue Team Tasks and Cookbook
10. Language Modes and Just Enough Administration (JEA)
11. AppLocker, Application Control, and Code Signing
12. Exploring the Antimalware Scan Interface (AMSI)
13. What Else? – Further Mitigations and Resources