Environment
- CB Protection Console: All Supported Versions
Objective
How to track script files normally considered "uninteresting".
Resolution
- Within the console navigate to Rules > Software Rules and select the Scripts tab
- Create a new rule
- The path or file should be the extension of the file. For example
*.ps1
- The process should be the process which will be executing the script. For example:
*\powershell.exe
Additional Notes