Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

RTT· red team

RTT · red team

Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Search techniques, tools, commands…⌘K

No scenario

No scenario · all techniques in scope

IdleStatus

0Scenarios

Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Back to Tools

AppLocker PowerShell Module

Local Host Enumeration

Host Enumeration

Defense Evasion

Windows PowerShell module for reading AppLocker policies, collecting file metadata, generating policy drafts, testing rule decisions, and applying policies to local or LDAP-backed Group Policy Objects. It is a policy administration tool, not a LOLBin or an EDR bypass. Set-AppLockerPolicy overwrites the existing policy unless -Merge is specified; these cmdlets operate on Group Policy and do not read AppLocker CSP policy.

Source

https://learn.microsoft.com/en-us/powershell/module/applocker/?view=windowsserver2025-ps

Language

Windows PowerShell

References

learn.microsoft.com learn.microsoft.com learn.microsoft.com learn.microsoft.com learn.microsoft.com

+7 more

Extended Details

RESTRICTED_ACCESS_BLUR_MARKER