What defensive measures does the article recommend against DotNetToJScript attacks?

The article advises restricting execution of JS, VBS, VBA macros, SCT, and WSC scripts separately. It emphasizes that blocking powershell.exe alone is insufficient because PowerShell runspace environments (.NET) can still be accessed. For a comprehensive defense, review the Loading .Net Programs Using JS article and consider application control policies that limit script execution, similar to methods discussed in Use Excel.Application object's RegisterXLL() method to load dll.