The PowerShell Podcast cover image

The PowerShell Podcast

Securing PowerShell with Fred Weinmann

Apr 25, 2022
01:11:33

I hope you are ready to learn because Fred hits the ground running with information and never lets up. We cover a lot of ground on security and PowerShell, covering topics like: Constrained Language Mode (CLM), script block logging, Anti-Malware Scan Interface (AMSI) and why you should be using it, and more. We finish things up with one of Fred's favorite topics: his amazing PowerShell modules like PSFramework, PSUtil, and PSAzureMigrationAdvisor.

Friedrich Weinmann Bio:

Friedrich Weinmann might be the most enthusiastic advocate of PowerShell I have ever met, and coming from a community where enthusiasm is the norm, that is a bold claim. He is a fantastic teacher and has helped many PowerShellers get started, including Andrew Pla. He is a Premier Field Engineer at Microsoft. Most importantly to him, he creates modules to simplify daily PowerShell. From his Magnum Opus PSFramework to PSAzureModuleAdvisor, which will help you convert your scripts in Azure as AzureAD and MsOnline become unsupported at the end of 2022.

Quote from Fred:

"Execution policy has never prevented a single attacker from running PowerShell if they really wanted to. It’s like you’re trying to protect your home and prevent burglars from coming in by putting a stone on your lawn. That’s the effect of the execution policy. They might miss the stone, they might break a leg, that just might save your day."

Resource links:

Freidrich's GitHub - https://github.com/FriedrichWeinmann

Friedrich's Website - https://allthingspowershell.blogspot.com/

Twitter! - https://twitter.com/fredweinmann

CLM - https://devblogs.microsoft.com/powershell/powershell-constrained-language-mode/

Freidrich on the value of teaching - https://allthingspowershell.blogspot.com/2018/12/the-roi-of-teaching-others.html

Ashley Mcglone labs - https://github.com/GoateePFE/PowerShellSummit2019/tree/master

Why Execution Policy is not security - https://www.netspi.com/blog/technical/network-penetration-testing/15-ways-to-bypass-the-powershell-execution-policy/

AaronLocker - https://devblogs.microsoft.com/powershell/powershell-constrained-language-mode/

 

Get the Snipd
podcast app

Unlock the knowledge in podcasts with the podcast player of the future.
App store bannerPlay store banner

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode

Save any
moment

Hear something you like? Tap your headphones to save it with AI-generated key takeaways

Share
& Export

Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode