PowerShell security features
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/PowerShell-Docs · commit 89f5083 · +6 −6 lines · also on GitHub
⋯ 48 unchanged lines
4949
## AMSI Support
5050
5151
The Windows Antimalware Scan Interface (AMSI) is an API that allows applications to pass actions to
52
−an antimalware scanner, such as Windows Defender, to scan for malicious payloads. Beginning
53
−with PowerShell 5.1, PowerShell running on Windows 10 (and higher) passes all script blocks to AMSI.
52
+an antimalware scanner, such as Windows Defender, to scan for malicious payloads. Beginning with
53
+PowerShell 5.1, PowerShell running on Windows 10 (and higher) passes all script blocks to AMSI.
5454
5555
PowerShell 7.3 extends the data that's sent to AMSI for inspection. It now includes all invocations
5656
of .NET method members.
⋯ 2 unchanged lines
5959
6060
## Constrained language mode
6161
62
−**ConstrainedLanguage** mode protects your system by limiting the cmdlets and .NET types
63
−allowed in a PowerShell session. For a full description, see [about_Language_Modes][04].
62
+**ConstrainedLanguage** mode protects your system by limiting the cmdlets and .NET types allowed in
63
+a PowerShell session. For a full description, see [about_Language_Modes][04].
6464
6565
## Application Control
6666
⋯ 21 unchanged lines
8888
- For modules, find the SBOM in the module's folder under `_manifest/spdx_2.2/manifest.spdx.json`.
8989
9090
The creation and publishing of the SBOM is the first step to modernize Federal Government
91
−cybersecurity and enhance software supply chain security. For more information about this initiative,
92
−see the blog post [Generating Software Bills of Materials (SBOMs) with SPDX at Microsoft][11].
91
+cybersecurity and enhance software supply chain security. For more information about this
92
+initiative, see the blog post [Generating SBOMs with SPDX at Microsoft][11].
9393
9494
## Security Servicing Criteria
9595
⋯ 27 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/PowerShell-Docs, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 02:15 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.