🟢Enumerating Security Controls

Windows Defender

Get-MpComputerStatus

AppLocker

Get-AppLockerPolicy -Effective | select -ExpandProperty RuleCollections

PowerShell Constrained Language Mode

$ExecutionContext.SessionState.LanguageMode

PowerShell Constrained Language Mode

LAPS

Microsoft Local Administrator Password Solution (LAPS) is used to randomize and rotate local administrator passwords on Windows hosts and prevent lateral movement.

Tool: LAPSToolkit

Using Find-LAPSDelegatedGroups

Find-LAPSDelegatedGroups

Using Find-AdmPwdExtendedRights

Find-AdmPwdExtendedRights

Using Get-LAPSComputers

Get-LAPSComputers