block powershell but allow only specific powershell script

Maheshv_arcolab — Tue, 05 Dec 2023 12:39:04 GMT

we need to block powershell in all endusers pc but allow only one particular script to be allowed to be run in powershell is there a possibility.

Re: block powershell but allow only specific powershell script

reaper — Tue, 05 Dec 2023 12:56:19 GMT

if you only need the one and have full control over it, you could add (just to make it easy on yourself) some sort of keyword or string at the top of the script, and then write a custom app to identify this script. you can then allow the custom app-id for your script and block everything else

topic Re: block powershell but allow only specific powershell script in Cortex XDR Discussions

block powershell but allow only specific powershell script

Re: block powershell but allow only specific powershell script