Security That Says “Yes”: Agile Windows Security with PowerShell
summary
Modules implement native Windows features AppLocker and Windows Firewall via human-readable JSON and YAML rule sets and are available on Jane Street GitHub; the code compares every rule property, updates Slack’s program path to the latest version, and enforces temporary rules that expire (default 5 days). A health probe scans firewall logs and auto-creates a recovery rule after a catastrophic change a real test once recovered a locked machine. Everything requires admin rights and is packaged as PowerShell frameworks.
AI-written summary · about
chapters (13)
- 0:00Introduction
- 1:18Speaker intro
- 3:23PowerShell for Windows security
- 10:18Windows firewall module
- 15:18Managing firewall rules
- 19:39Rolling back changes
- 21:27Dynamic path updates
- 23:11Temporary firewall rules
- 25:45Health checking lockouts
- 29:21AppLocker with PowerShell
- 34:02Automating AppLocker exceptions
- 37:08Group Policy to PowerShell
- 39:42Resources & closing
related talks
43mSecuring your Environment with Just Enough Administration
57mSecuring PowerShell: Hands-On Lab
22mEnsuring Platform Security with Windows Bosh Add-ons - Maris, Schaefbauer, Coppock, Boeing
50mAutomating security monitoring
48mStop Writing Insecure PowerShell... Seriously.
47mSecure PowerShell web tools with System Frontier
41mHow Secure Can You Be?
01h 40mDefending against PowerShell attacks - in theory, and in practice