Cylance & PoSh Scripts

Support forums for the Habitat Automate plugin
Post Reply
sirkerry
Posts: 8
Joined: Fri Jul 03, 2020 1:17 am
3

Cylance & PoSh Scripts

Post by sirkerry »

Cylance is killing the PoSh scripts from Habitat that run on workstations, any chance y'all can change these over to signed scripts so we can have Cylance whitelist them?

User avatar
Cubert
Posts: 2430
Joined: Tue Dec 29, 2015 7:57 pm
8
Contact:

Re: Cylance & PoSh Scripts

Post by Cubert »

I don't know enough about cert signing to just go off and do that.

What little I do know says for that to work I would need a public cert which would need to be purchased and incorporated in to scripts. I will look in to what it takes to do this.

sirkerry
Posts: 8
Joined: Fri Jul 03, 2020 1:17 am
3

Re: Cylance & PoSh Scripts

Post by sirkerry »

Apparently a way around this is to have the PowerShell script as a .ps1 file in the LTshare instead of creating it on the fly by the script, then it's possible to check the checksum/hash of the .ps1 file against what is on the LTshare that Cylance knows about and have it allow the PoSh script to run (or so I've been told).

Post Reply

Return to “Habitat”