PowerShell version 2.0 doesn’t strongly integrate with AMSI, presenting an opportunity to bypass local controls.

Check Current Version in Interpreter

Dumps a table of version information related to the current interpreter session

$PSVersionTable

Checking for PowerShell Version 2

A registry value can be referenced to determine if PowerShell version 2 is available.

Get-ItemProperty HKLM:\Software\Microsoft\PowerShell\1\PowerShellEngine\ -Name PowerShellVersion

Dropping to a PowerShell Version 2

powershell -version 2.0


Backlinks: