Script score

The Aurora Protect Desktop agent (version 3.2 and later) supports enhanced script control using script scoring for Active Script and PowerShell scripts. Scripts that have an unsafe or abnormal script score can be intelligently blocked from executing and alerted to the management console according to the device policy.

The following table describes the script score status that appears in the Protection > Script Control screen.

Status

Description

Unscored

This status displays if Endpoint Defense Cloud services could not score a script due to one of the following reasons:

  • The device is not connected to the Internet.
  • The device is prevented from connecting to Endpoint Defense Cloud services.
  • The script event does not have an associated file that can be scored.

Not detected

This status displays if Endpoint Defense Cloud does not classify the script as suspicious or malicious.

Abnormal

This status displays if Endpoint Defense Cloud classifies the script as somewhat suspicious and potentially malicious.

Unsafe

This status displays if Endpoint Defense Cloud classifies the script as considerably suspicious or definitely malicious.