Blueprint: Build the Best in Cyber Defense
Josh Johnson: PowerShell and Defensive Automation for the Blue Team
This episode features Josh Johnson, author of the SANS course "SEC586: Blue Team Operations - Defensive Powershell." He discusses the importance and uses of PowerShell for blue teams, including log analysis, incident response, and automation, as well as how to prevent its misuse…