services

Training sessions

PowerShell Security

This training focuses on the security aspects of PowerShell, its abuse by attackers, and ways to protect against these threats. PowerShell is a powerful tool widely used by both administrators and attackers. Its capabilities enable efficient automation, but also pose a significant risk of being misused for malicious purposes.

During the training, we will go through the most common PowerShell-based attack techniques, as well as their detection and mitigation. We will focus on security features such as AMSI, PowerShell logging, and configuration best practices to improve environment protection. The training combines theoretical foundations with practical demonstrations of PowerShell in a security context.

Language: Czech

IT administrators, security analysts, penetration testers, incident response teams

10.9.2025

50

6 hours in 1 day

Prague

CZK 12,500 excl. VAT (if purchased by June 30, 2025, afterwards CZK 22,500 excl. VAT)

Trainer
Jan Marek

What participants will take away from the training:

Understanding how PowerShell works and why it is a popular tool among attackers
How to detect and analyze malicious scripts and PowerShell behavior
How to effectively configure PowerShell to enhance security
How attackers bypass security mechanisms like AMSI and logging
Hands-on demonstrations of attacks and defense strategies

Prerequisites / Expected knowledge:

Basic knowledge of PowerShell (working with scripts, modules, cmdlets)
Basic understanding of Windows security concepts
Ability to work with Windows Event Log and monitoring tools

What participants will need during the training:

Laptop with Windows 10/11 or Linux (with virtualization support)
PowerShell 7+ installed and functional
PowerShell ISE or VSCode with PowerShell extension
Ability to run PowerShell as administrator
Access to Windows Event Log for analysis
Working internet connection for downloading and testing scripts