PowerShell Profile

• profile.ps1 is a script that executes when users open new PowerShell windows
• can be used to customize appearance and behaviour
• can be modified to execute malicious code
• $HOME\Documents\WindowsPowerShell\Profile.ps1
• if it doesnt exist, just create it:

beacon> mkdir C:\Users\pchilds\Documents\WindowsPowerShell
beacon> cd C:\Users\pchilds\Documents\WindowsPowerShell