PowerShell Attack

Definitions

1. An attack or intrusion step that uses PowerShell to execute commands, download payloads, manipulate the system, or evade simple defenses on Windows environments. PowerShell attacks are common because the tool is powerful, widely installed, and useful for both legitimate administration and malicious automation.

   In plain English: An attack that uses PowerShell to run malicious commands or scripts on Windows systems.

   Example: "The intrusion began as a PowerShell attack launched from a document macro that fetched the next-stage script from a remote server."

Related Terms

• Penetration Testing
• Honeypot
• Cmdlet
• DSC
• Execution Policy
• Script Block
• PowerShell Module
• Credential Guard