EDR: Does the Windows Sensor Support Fileless Script Load Events in PowerShell 7
Article ID: 291155
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Carbon Black Hosted EDR (formerly Cb Response Cloud)
Issue/Introduction
The Windows Sensor does not seem to be capturing Filess Script Loads from PowerShell 7
Environment
- EDR Sensor: 7.2.0 +
- Microsoft Windows: All Supported Versions
Cause
The current Windows sensor does not support capturing Fileless Script Load Events from PowerShell 7
Resolution
Carbon Black is currently evaluating support for PowerShell 7
Additional Information
Product suggestions or Enhancement requests can be made at Voice Of Customer
Feedback
Yes
No
Powered by
