Skip to content
Threat Feed
Subscribe

Tag

Execution_policy

1 brief RSS
high advisory

Detection of PowerShell Execution Policy Changes to Unrestricted or Bypass

Detection of modifications to the PowerShell execution policy to 'Unrestricted' or use of the 'Bypass' flag indicates a potential attempt to execute unsigned or malicious scripts, bypassing security controls.

PowerShell execution_policy bypass security_controls
2r 1t