persistence-info.github.io

View on GitHub

PowerShell Profile

Location:

Where $PSHOME variable = installation directory for PowerShell, $Home variable = current user’s home directory.

Classification:

Criteria Value
Permissions Admin; User
Security context User
Persistence type Files only
Code type Other
Launch type User initiated1
Impact Non-destructive
OS Version All OS versions
Dependencies OS only
Toolset Scriptable

Description:

PowerShell profile - a script, running automatically each time PowerShell is started.
To start PowerShell without profiles, use the -NoProfile parameter of PowerShell.exe

References:

https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_profiles

Credits:

See also:

Remarks:

  1. PowerShell must be launched