PowerShell Constrained Language Mode

PowerShell is a Windows command and scripting interpreter adversaries can use to execute commands and scripts. This record covers execution while Constrained Language Mode (CLM) is in effect: under system-wide application-control policy, an untrusted script may run in CLM or be blocked depending on policy and PowerShell version, while permitted cmdlets and native commands remain usable. CLM is available from PowerShell 3.0 onward; Windows PowerShell 2.0 does not provide it. CLM is a restriction state, not a bypass, and these execution methods do not remove it.