Powershell -- Reporting Verisons & Upgrading


Been searching for a bit but haven't found anything on powershell reporting.  We are seeing an uptick in powershell abuse in malware.  I would like to report on what versions of powershell are installed in our inventory.  I would also be interested in deploying latest version also.  In a dream world, I would like to lock out users from using powershell.

Any help?  

Thank you!

1 Comment   [ + ] Show comment
  • Lot of info on determining powershell https://stackoverflow.com/questions/1825585/determine-installed-powershell-version

    You can blacklist apps from running in the K1000. Check the manual for application control. - flip1001 2 years ago

Answers (1)

Posted by: Ziggi 2 years ago
Blue Belt

You can create a custom inventory field/rule which determines PSVersion. You can then create a smart label, if version is 5.x then disable powershell...

ShellCommandTextReturn(cmd /q /c powershell.exe -command "$PSVersionTable.PSVersion")

Should look like this

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login


This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ