LOADING N0PERM…
Task automation and configuration management framework. Features Constrained Language Mode, Script Block Logging, and AMSI security controls.
A standard WINDOWS utility used across offensive reconnaissance, packet forensics, and defensive system administration.
Direct visibility into network interfaces, protocol frames, access controls, or filesystem structures without graphical overhead.
During live system triage, initial reconnaissance, forensic capture inspection, or baseline configuration auditing.
# Pre-installed on Windows
# Install PowerShell 7 cross-platform
winget install Microsoft.PowerShell
brew install --cask powershellSecurity auditing cmdlets:
- Check Execution Policy: Get-ExecutionPolicy -List
- Check Language Mode: $ExecutionContext.SessionState.LanguageMode
- Inspect Defender real-time protection: Get-MpComputerStatus | Select-Object RealTimeProtectionEnabled
- Inspect recent security event logs: Get-EventLog -LogName Security -Newest 20