PowerShell is certainly powerful, and that’s why hackers love it
The PowerShell scripting language that runs behind the scenes of every Windows based PC is also one of the tools most favored by hackers. In a new report, it’s been discovered that more than a third of security incidents reported use PowerShell in some way to facilitate the breach.
PowerShell is, as Microsoft describes it, a “task automation and configuration management framework,” built upon the .NET Framework, that facilitates the simplistic management of systems. That’s all well and good, but it’s that power and ease of use which makes it so versatile and useful for nefarious individuals.
This news comes out of a new United Threat Research report from Carbon Black. It cites research that suggests 38 percent of incidents reported to the security firm utilized PowerShell in some form or another. Spread that net further to Carbon Black’s partners, and the number jumps to 68 percent of system breaches having some PowerShell involvement.