Set HIPS to block powershell scripts by contents

Hi all,

I was wondering if it’s possible to setup HIPS or any other component into CIS to block powershell by content. I cannot find this kind of granularity.
Any suggestions?
Thanks in advance

No, the best you can do is by file hash of the powershell script and it would be done using the auto-containment rules.

Hi,

thanks for the reply, I will give it a go, on the other side is possible to request the future to block the scripts by content? Look for particular words inside the script for example

Regards