Skip to main content

telos_agent/tools/command_security/powershell/
dangerous_cmdlets.rs

1pub const DANGEROUS_COMMANDS: &[&str] =
2    &["Invoke-Expression", "Register-ScheduledTask", "New-Service", "Set-MpPreference"];
3
4pub const POWERSHELL_EXECUTABLES: &[&str] = &["pwsh", "pwsh.exe", "powershell", "powershell.exe"];