![]() ![]() Asking google reveals that this is related to a feature in Symantec Endpoint Protection called “Host Integrity”. Which indicates that there is a job titled “AgentHIScript”. ![]() The next thing that peeked my interest was the “Job:AgentHIScript”. Searching for this file on disk yields no results as it gets deleted once the process is terminated. And immediately we can see that a JavaScript file is being called from disk and executed. So i turned back to the command line arguments from the logs to get a better understanding. The issue i faced was that this process is not persistent and it only stays for a couple of seconds.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |