Hi all,
I was wondering if it’s possible to setup HIPS or any other component into CIS to block powershell by content. I cannot find this kind of granularity.
Any suggestions?
Thanks in advance
Hi all,
I was wondering if it’s possible to setup HIPS or any other component into CIS to block powershell by content. I cannot find this kind of granularity.
Any suggestions?
Thanks in advance
No, the best you can do is by file hash of the powershell script and it would be done using the auto-containment rules.
Hi,
thanks for the reply, I will give it a go, on the other side is possible to request the future to block the scripts by content? Look for particular words inside the script for example
Regards