Windows PowerShell for Auditors
PowerShell has been around for more than a decade, and is now the Microsoft-preferred tool for performing Windows administration. It's also a very capable platform for developing audit evidence during reviews of Active Directory domains and Windows servers and workstations.
In this webcast, we will cover the basics of running PowerShell commands, discuss techniques for using PowerShell as part of the audit process in Windows environments, and view a number of examples of using PowerShell for solving real-world audit problems.
The topic of this webcast is adapted as a sample of the many important audit tools and techniques covered in the SANS course AUD507: Auditing Systems, Applications, and the Cloud.
