PowerShell Detection and Security - Understanding Adversarial Abuse and Defense Strategies

Join a comprehensive webinar exploring PowerShell, one of the most prevalent MITRE ATT&CK® techniques, to master the detection and prevention of malicious activities within Windows systems. Discover how adversaries exploit this widely-installed Windows configuration management framework while learning to observe and detect suspicious commands and behaviors. Gain expert insights from VMware Carbon Black, MITRE ATT&CK®, and Red Canary professionals on adversarial PowerShell abuse methods, essential telemetry collection tools, detection and mitigation strategies, and security control testing using Atomic Red Team. Explore critical topics including scriptblock logging, AMSI real-time protection, unusual formatting detection, and constrained language mode implementation. Learn to identify malicious PowerShell activities within routine system operations, develop effective detection analytics, and test visibility capabilities to enhance your organization's security posture against sophisticated cyber threats.