PowerShell is widely used, but a few thinks about how cmdlets work behind the scenes.
This knowledge allows IT administrators find hidden capabilities even in built-in cmdlets, developers create their own, and better understand PowerShell-based attacks for security engineers.

The session sheds light on well-known cmdlets and how to overcome some built-in limitations.

Demo-based session contains:
- Win32 API intro
- Monitoring Built-in Cmdlets API Calls
- Analyzing API Calls in a source code
- Abstract Win32 API functions with PSReflect
- Customize Built-in Cmdlets


This session aims to demystify the behind-the-scenes operations of well-known cmdlets, revealing hidden capabilities and providing insights into overcoming built-in limitations.
Attendees will gain knowledge on:
-Discovering hidden features in built-in cmdlets
-Creating custom cmdlets
-Understanding PowerShell-based attacks for enhanced security