Powershell -- Reporting Verisons & Upgrading
Hello,
Been searching for a bit but haven't found anything on powershell reporting. We are seeing an uptick in powershell abuse in malware. I would like to report on what versions of powershell are installed in our inventory. I would also be interested in deploying latest version also. In a dream world, I would like to lock out users from using powershell.
Any help?
Thank you!
1 Comment
[ + ] Show comment
Answers (1)
Please log in to answer
Posted by:
Ziggi
5 years ago
You can create a custom inventory field/rule which determines PSVersion. You can then create a smart label, if version is 5.x then disable powershell...
ShellCommandTextReturn(cmd /q /c powershell.exe -command "$PSVersionTable.PSVersion")
Should look like this
You can blacklist apps from running in the K1000. Check the manual for application control. - flip1001 5 years ago