PowerShell Interview Questions Flashcards

(5 cards)

1
Q

How is PowerShell used in Red Teaming?

A

It leverages the .NET framework to call Win32 APIs and execute code in memory without dropping files.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

How does PowerShell differ from CMD?

A

PowerShell is object-oriented (returning .NET objects) rather than text-based.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is offensive PowerShell automation?

A

Using scripts for environment keying, memory-resident stagers, and rapid environment enumeration.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What are cmdlets in a security context?

A

Specific .NET commands used to interact with the OS, identity, and network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Give an example of offensive PS automation.

A

Using Get-ChildItem with recursion and filters to scan for sensitive files like ‘config’ or ‘password’ across a drive.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly