How is PowerShell used in Red Teaming?
It leverages the .NET framework to call Win32 APIs and execute code in memory without dropping files.
How does PowerShell differ from CMD?
PowerShell is object-oriented (returning .NET objects) rather than text-based.
What is offensive PowerShell automation?
Using scripts for environment keying, memory-resident stagers, and rapid environment enumeration.
What are cmdlets in a security context?
Specific .NET commands used to interact with the OS, identity, and network.
Give an example of offensive PS automation.
Using Get-ChildItem with recursion and filters to scan for sensitive files like ‘config’ or ‘password’ across a drive.