Sangfor Community»Categories Cyber Security Athena Endpoint Protection Platform (EPP) how to whitelist powershell trigger

how to whitelist powershell trigger

views: 2508 | comments: 3 | added to Favorites 0
Lights on | 提示:支持键盘翻页<-左 右->
    组图打开中,请稍候......
Created: 2026-May-13 11:55

Summary:

i have this ps command: powershell.exe -Command "[Console]::OutputEncoding=[System.Text.Encoding]::UTF8;git diff -- obs_mvp\ui\main_window.py" that trigger this notification. any insights with this ...

Reply

Newbie517762 Posted 2026-Jun-01 12:28
HiHi,

Please check the Fileless Attack Protection settings and set it to "No Action – Report Only".

Prosi Posted 2026-May-15 17:26
This comes from Sangfor Athena EPP (Endpoint Protection Platform), not PowerShell.
Suggestion:
- Ensure the command comes from a tool/editor
- The git.exe path is valid
- Scan the machine
- Add workflows to the whitelist if this is an enterprise environment
- Avoid unnecessary PowerShell wrappers
Zonger Posted 2026-May-13 18:41
The notification you are seeing from Sangfor Athena EPP is a common reaction to how modern development tools interact with the Windows shell. Security platforms are naturally "paranoid" about PowerShell because it is a powerful tool often used to execute malicious code directly in memory.

Your command is being flagged due to Heuristic Analysis. This means the security software isn't necessarily saying your command is a virus but rather that its behavior matches patterns often used by threats.

Its completely safe since you are the one initiating the git diff to inspect changes in your main_window.py file, this is a False Positive. The command is simply trying to ensure the text characters display correctly in UTF-8.

It is recommeneded to perform the following actions:

Allow the Process: You can safely click Allow to let the command finish.

Trust the Source: If this happens frequently while using Git in your terminal or IDE you may need to add your project folder or the specific powershell.exe calling pattern to the Trust List or Exclusions within the Sangfor management console.