Sangfor Community»Categories Cyber Security Athena Endpoint Protection Platform (EPP) how to whitelist powershell trigger

how to whitelist powershell trigger

views: 102 | comments: 1 | added to Favorites 0
Lights on | 提示:支持键盘翻页<-左 右->
    组图打开中,请稍候......
Created: 2026-May-13 11:55

Summary:

i have this ps command: powershell.exe -Command "[Console]::OutputEncoding=[System.Text.Encoding]::UTF8;git diff -- obs_mvp\ui\main_window.py" that trigger this notification. any insights with this ...

Reply

Zonger Posted 2026-May-13 18:41
The notification you are seeing from Sangfor Athena EPP is a common reaction to how modern development tools interact with the Windows shell. Security platforms are naturally "paranoid" about PowerShell because it is a powerful tool often used to execute malicious code directly in memory.

Your command is being flagged due to Heuristic Analysis. This means the security software isn't necessarily saying your command is a virus but rather that its behavior matches patterns often used by threats.

Its completely safe since you are the one initiating the git diff to inspect changes in your main_window.py file, this is a False Positive. The command is simply trying to ensure the text characters display correctly in UTF-8.

It is recommeneded to perform the following actions:

Allow the Process: You can safely click Allow to let the command finish.

Trust the Source: If this happens frequently while using Git in your terminal or IDE you may need to add your project folder or the specific powershell.exe calling pattern to the Trust List or Exclusions within the Sangfor management console.