Windows PowerShell for Security Professionals

The training starts with the basics of using PowerShell so as to provide students with a basic understanding of its use and scripting and then moving on how it can be used to leverage multiple Windows Technologies by providing the fundamentals on each and then moving on how it can be leveraged by both defender and attackers.

This class is aimed at offense and defense specialist with a focus is proving a solid foundation for the use of Windows PowerShell and how it can be used to leverage Windows technologies like COM, WMI, CIM and ADSI. Class also covers from how PowerShell is used in the initial stages of an attack, how to leverage it in reconnaissance, persistence and what are the IOCs It generates. Class will not only teach PowerShell but also the fundamentals of the technologies so they can be adapted for WSH and C# where PowerShell will help with the fast prototyping and testing of ideas for both offense and defense use.

Requirements

Scripting knowledge in any language and general understanding on the operation and function of Windows networks.
A Windows 10 VM with the latest version of PS.

About the Speakers

Carlos Perez

Carlos Perez is currently the Research Practice Lead at TrustedSec where he works researching new threats and developing new tooling both offensive and for incident response. He has worked in infosec for the last 20 years and has been an active contributor to the community:

Contributor to the Metasploit project around Post-Exploitation libraries, multiple post, auxiliary and exploit modules under his handle DarkOperator.
Co-Host of the Security Weekly Podcast.
5yr Microsoft MVP for Cloud and Management in the areas of Enterprise Security and PowerShell.
Member of the PTES (Penetration Testing Execution Standard) Board.
Author of multiple blog posts and guide at https://www.darkoperatorl.com
Speaker and trainer at Derbycon, DEFCON, BSidesPR and others.