Please see the following for further reading relating to this chapter:
- PowerShell Remoting Security Considerations: https://docs.microsoft.com/en-us/powershell/scripting/setup/winrmsecurity
- WS-Management (WSMan) Remoting in PowerShell Core: https://docs.microsoft.com/en-us/powershell/scripting/core-powershell/wsman-remoting-in-powershell-core
- About Execution Policies: https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_execution_policies
- Set-ExecutionPolicy: https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.security/set-executionpolicy
- What Is AppLocker? https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/applocker/what-is-applocker
- PowerShell Security at Enterprise Customers: https://blogs.msdn.microsoft.com/daviddasneves/2017/05/25/powershell-security-at-enterprise-customers/
- PowerShell Team Blog: https://blogs.msdn.microsoft.com/powershell/2015/06/09/powershell-the-blue-team/
- A Sysmon configuration file for everybody to fork: https://github.com/SwiftOnSecurity/sysmon-config
- Microsoft Advanced Threat Analytics: https://www.microsoft.com/en-us/cloud-platform/advanced-threat-analytics
- Windows Defender Advanced Threat Protection: https://www.microsoft.com/en-us/windowsforbusiness/windows-atp