I need a solution
Greetings to all,
I am trying via SEPM to create a rule on application control to block all JS scripts running via wscript.exe. I tried a simple "Hello world" script, and the attempt is not logged.
The procedure to replicate is as follows:
- Create a new Rule Set
- Create a new Rule, where wscript.exe is being monitored.
I also checked and unchecked the "Sub-processes inherit conditions" checkbox with the same result - Create a new condition under the above rule, blocking all JS scripts. The process i added is: *.js
Launching the basic JS script does not log the attempt to execute it.
Any idea why?
Any help is appreciated, thank you in advance.
Best Regards
0