Hello,
I would like to set up a compliance parameter to kill a process if it is started on a computer.
Here is my discovery script:
And my remediation script:
I set the returned value to be notworking, with the option to run the remediation script, but the rule gets an error when evaluated on the client machine.
If I set the contains option, the detection works fine, but I don't have a correction option
Do you have an idea ?
Thank you very much
I would like to set up a compliance parameter to kill a process if it is started on a computer.
Here is my discovery script:
Code:
get-process mspaint -errorAction SilentlyContinue {
echo "working"
}else{
echo "notworking"
}
And my remediation script:
Code:
get-process mspaint -errorAction SilentlyContinue | stop-process
I set the returned value to be notworking, with the option to run the remediation script, but the rule gets an error when evaluated on the client machine.
If I set the contains option, the detection works fine, but I don't have a correction option
Do you have an idea ?
Thank you very much