Executing PowerShell without PowerShell.exe

The next important topic addresses one of the top myths around PowerShell security:


The first three of the top myths you have already learned about. The last one is about the problem that many defenders still think exists today: blocking PowerShell.exe will also block PowerShell in general. As you know, PowerShell is based on .NET, and in detail, it uses the System.Management.Automation namespace. Therefore, System.Management.Automation.dll will be loaded to execute PowerShell cmdlets.

The documentation for the API for System.Managamenent.Automation.dll can be found at the following link: https://docs.microsoft.com/en-us/dotnet/api/system.management.automation ...

Get Learn PowerShell Core 6.0 now with the O’Reilly learning platform.

O’Reilly members experience live online training, plus books, videos, and digital content from nearly 200 publishers.