H-ISAC TLP White: Joint Cybersecurity Information Sheet - Keeping PowerShell: Security Measures to Use and Embrace June 23, 2022

On June 22, 2022, a Cybersecurity Information Sheet was released by cybersecurity authorities from the United States, New Zealand, and the United Kingdom recommending proper configuration and monitoring of PowerShell, as opposed to removing or disabling PowerShell entirely. This will provide benefits from the security capabilities PowerShell can enable while reducing the likelihood of malicious actors using it undetected after gaining access to victim networks. The following recommendations will help defenders detect and prevent abuse by malicious cyber actors while enabling legitimate use by administrators and defenders

View the detailed report below.