2 Replies Latest reply on Oct 28, 2015 3:28 PM by neelima

    How to whitelist a process/service that calls cscript and then a tmp file

    Sean Slattery



      I have a service m_agent_service.exe which frequently runs C:\Windows\SysWOW64\cscript.exe with arguments such as C:\Windows\TEMP\m_a3832.tmp. The execution of the tmp files is being blocked, logged and alerted at the console. Is there a way to whitelist this scenario? Thank you in advance.