/build/static/layout/Breadcrumb_cap_w.png

Systems Management Question


Powershell -- Reporting Verisons & Upgrading

03/29/2019 433 views

Hello,

Been searching for a bit but haven't found anything on powershell reporting.  We are seeing an uptick in powershell abuse in malware.  I would like to report on what versions of powershell are installed in our inventory.  I would also be interested in deploying latest version also.  In a dream world, I would like to lock out users from using powershell.

Any help?  

Thank you!

1 Comment   [ + ] Show comment

Comments

  • Lot of info on determining powershell https://stackoverflow.com/questions/1825585/determine-installed-powershell-version

    You can blacklist apps from running in the K1000. Check the manual for application control.

All Answers

1

You can create a custom inventory field/rule which determines PSVersion. You can then create a smart label, if version is 5.x then disable powershell...


ShellCommandTextReturn(cmd /q /c powershell.exe -command "$PSVersionTable.PSVersion")


Should look like this



Answered 04/01/2019 by: Ziggi
Blue Belt

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login

Share

 
This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ