Advanced PowerShell for Blue Team

In previous powershell tutorials, we have seen how to access Eventlogs and Log files and search for their contents. In this section, we will learn how to take these a little further and turn them into automations.

1. 1Lessons6 lessons

   1. 1.1Creating Security Tools with PowerShellPreview1 question · 6 min
   2. 1.2Using TI Resources with PowerShell2 questions · 9 min
   3. 1.3Checking for Updates5 min
   4. 1.4Creating Multiplatform Scripts2 questions · 6 min
   5. 1.5Forensics and Incident Response with PowerShell - 14 questions · 8 min
   6. 1.6Forensics and Incident Response with PowerShell - 21 question · 6 min