Making SEP to log or block any executable from running with low or unproven reputation

Hi guys , I am looking for a way to perform a use case which I need to follow. Appreciate your expert opinion on this. I need to make SEP to Log (create an event ) for  any executables which users try to run on their machines which have no reputation ( unproven files)  to be precise, in Symantec Reputation services. Is there any way we can achieve this ?

I know we have a way to do this if users try to download any files from the Internet ( download Insight) we can block unproven files.  But I am asking if we can do it locally via the Auto Protect or some other component of SEP for any executable which users try to execute which has low reputation ( unproven files)   Appreciate your support.

Thanks