Securing PowerShell by Constrained Language mode (SRP, PowerShell 5.0+)ĭisabling execution of scripts managed by Windows Script Host. Protecting against weaponized documents, when MS Office and Adobe Acrobat Reader XI/DC are used to open them.Įnabling "Run as administrator" for MSI files.ĭisabling PowerShell script execution (Windows 7+). Restricting shortcut execution to some folders only (via SRP).Įnabling Windows Defender advanced settings, like PUA protection, ASR rules, Network Protection, etc. Protecting (deny execution) writable subfolders in "C:Windows" folder (via SRP). Whitelisting files in SRP by path (also with wildcards) and by hash.īlocking vulnerable system executables via SRP (Bouncer blacklist).
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |