Skip Navigation
  1. BlackBerry Docs
  2. CylanceON-PREM
  3. Cylance ONPREM Administration Guide
  4. Configuring the CylanceON-PREM console
  5. CylanceON-PREM policies
  6. Script control

Script control

Script control protects devices by blocking malicious Active Script, PowerShell scripts, and Microsoft Office macros from running.
Script control monitors and protects against scripts running in your environment. The Agent can detect the script and script path before the script is executed. Depending on the policy set for Script Control (alert or block), the Agent will allow or block the execution of the script.
Microsoft Office macros use Visual Basic for Applications (VBA) that allows embedding code inside an Office document (typically Word, Excel, and PowerPoint). The main purpose for macros is to simplify routine actions, like manipulating data in a spreadsheet or formatting text in a document. However, malware creators can use macros to run commands and attack the system. It is assumed that a Microsoft Office macro trying to manipulate the system is a malicious action. The Agent looks for malicious actions originating from a macro that affects things outside the Microsoft Office products.
When you use script control, you should consider the following:
  • Starting with Microsoft Office 2013, macros are disabled by default. Most of the time, you do not need to enable macros to view the content of an Office document. You should only enable macros for documents you receive from users you trust, and you have a good reason to enable it. Otherwise, macros should always be disabled.
  • If the script launches the PowerShell console, and Script Control is set to block the PowerShell console, the script will fail. It is recommended that users change their scripts to invoke the PowerShell scripts, not the PowerShell console.
  • Alert only monitors scripts running in your environment. It is recommended for initial deployment or testing.
  • Block only allows scripts to run from specific folders. You should use it after you test in Alert mode.
Script Control Setting
Description
Active Script
Active Script includes VBScript and Jscript.
Macros
Microsoft Office macros use Visual Basic for Applications (VBA) to simplify routine actions, like manipulating data in a spreadsheet.
PowerShell
PowerShell refers to PowerShell commands, including one-liners.
Block PowerShell Console Usage
The PowerShell console is blocked.