Quantcast
Channel: Symantec Connect - Endpoint Protection - Discussions
Viewing all articles
Browse latest Browse all 10484

Protection of JS scripts running via wscript.exe

$
0
0
I need a solution

Greetings to all,

I am trying via SEPM to create a rule on application control to block all JS scripts running via wscript.exe. I tried a simple "Hello world" script, and the attempt is not logged.

The procedure to replicate is as follows:
 

  • Create a new Rule Set
  • Create a new Rule, where wscript.exe is being monitored.
    I also checked and unchecked the "Sub-processes inherit conditions" checkbox with the same result
  • Create a new condition under the above rule, blocking all JS scripts. The process i added is: *.js

Launching the basic JS script does not log the attempt to execute it.
Any idea why?

Any help is appreciated, thank you in advance.

Best Regards

0
1469009888

Viewing all articles
Browse latest Browse all 10484

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>