Block Powershell in Endpoint Security.

Products

• Endpoint Security Complete

Issue/Introduction

How to Block Powershell in Endpoint Security (SES).

Environment

SES

Resolution

Under 'Default Custom Application Behaviors Policy', Include the below extension under 'File and Folder Access Attempts' condition and Terminate the attempt.

• .ps1 (Script)
• .ps1xml (XML Document)
• .psc1 (Console File)
• .psd1 (Data File)
• .psm1 (Script Module)
• .pssc (Session Configuration File)
• .psrc (Role Capability File)
• .cdxml (Cmdlet Definition XML Document)

Additional Information

https://en.wikipedia.org/wiki/PowerShell