


Select "Turn Windows features on or off". If either of the following have a "State" of "Enabled", this is a finding.įeatureName : MicrosoftWindowsPowerShellV2įeatureName : MicrosoftWindowsPowerShellV2Root

Get-WindowsOptionalFeature -Online | Where FeatureName -like *PowerShellv2* Run "Windows PowerShell" with elevated privileges (run as administrator). Windows 10 Security Technical Implementation Guideĭetails Check Text ( C-22443r554669_chk ) Disabling the Windows PowerShell 2.0 mitigates against a downgrade attack that evades the Windows PowerShell 5.0 script block logging feature. Windows PowerShell 5.0 added advanced logging features which can provide additional detail when malware has been run on a system.
