ISM-1624

PowerShell script block logs are protected by Protected Event Logging functionality.

Topic
PowerShell
Applicable to
all

History

Oct 2020
PowerShell script block logs are protected by Protected Event Logging functionality.
Security control 1624 was introduced to cover the protection of Windows Event Logs that potentially contain sensitive information from PowerShell’s script block logging functionality.