PowerShell security features
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/PowerShell-Docs · commit 9f1ad36 · +13 −13 lines · also on GitHub
⋯ 63 unchanged lines
6464
6565
## Application Control
6666
67
−Windows 10 includes two technologies, [Windows Defender Application Control (WDAC)][08] and
68
−[AppLocker][07] that you can use to control applications. PowerShell detects if a system wide
69
−application control policy is being enforced. The policy applies certain behaviors when running
70
−script blocks, script files, or loading module files to prevent arbitrary code execution on the
71
−system.
67
+Windows 10 includes two technologies, [App Control for Business][08] and [AppLocker][07] that you
68
+can use to control applications. PowerShell detects if a system wide application control policy is
69
+being enforced. The policy applies certain behaviors when running script blocks, script files, or
70
+loading module files to prevent arbitrary code execution on the system.
7271
73
−WDAC is designed as a security feature under the servicing criteria defined by the Microsoft
74
−Security Response Center (MSRC). WDAC is the preferred application control system for Windows.
72
+App Control for Business is designed as a security feature under the servicing criteria defined by
73
+the Microsoft Security Response Center (MSRC). App Control is the preferred application control
74
+system for Windows.
7575
76
−For more information about how PowerShell supports AppLocker and WDAC, see
77
−[Using Windows Defender Application Control][10].
76
+For more information about how PowerShell supports AppLocker and App Control, see
77
+[Use App Control to secure PowerShell][10].
7878
7979
## Software Bill of Materials (SBOM)
8080
⋯ 17 unchanged lines
9898
9999
Security features
100100
101
−- System Lockdown with WDAC
102
−- Constrained language mode with WDAC
101
+- System Lockdown with App Control for Business
102
+- Constrained language mode with App Control for Business
103103
104104
Defense in depth features
105105
⋯ 8 unchanged lines
114114
[04]: /powershell/module/microsoft.powershell.core/about/about_language_modes
115115
[05]: /powershell/module/microsoft.powershell.core/about/about_logging_non-windows
116116
[06]: /powershell/module/microsoft.powershell.core/about/about_logging_windows
117
−[07]: /windows/security/threat-protection/windows-defender-application-control/applocker/what-is-applocker
118
−[08]: /windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control
117
+[07]: /windows/security/application-security/application-control/app-control-for-business/applocker/what-is-applocker
118
+[08]: /windows/security/application-security/application-control/app-control-for-business/appcontrol
119119
[09]: /windows/win32/amsi/how-amsi-helps
120120
[10]: app-control/application-control.md
121121
[11]: https://devblogs.microsoft.com/engineering-at-microsoft/generating-software-bills-of-materials-sboms-with-spdx-at-microsoft/
⋯ 1 unchanged line
Microsoft's Markdown source from MicrosoftDocs/PowerShell-Docs, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 02:15 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.