Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

CB Protection: Why do Powershell reads show up as executions?

CB Protection: Why do Powershell reads show up as executions?

Environment

  • CB Protection: All Supported Versions

Question

Why does it look like powershell is executing powershell scripts even when it's just reading the scripts? 

Answer

  • This happens because when a script processor loads a script even for reading it always shows up as an execution even if powershell.exe isn't running the instructions in the script. 

Labels (1)
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎10-29-2019
Views:
315
Contributors