how to whitelist powershell trigger

johnlj Lv1Posted 2026-May-13 11:55

i have this ps command:
powershell.exe -Command "[Console]::OutputEncoding=[System.Text.Encoding]::UTF8;
git diff -- obs_mvp\ui\main_window.py"

that trigger this notification.

any insights with this issue will be appreciated, thank you.

-john




640296a03f57961093.png (29.6 KB, Downloads: 10)

640296a03f57961093.png

By solving this question, you may help 351 user(s).

Posting a reply earns you 2 coins. An accepted reply earns you 20 coins and another 10 coins for replying within 10 minutes. (Expired) What is Coin?

Enter your mobile phone number and company name for better service. Go

Zonger Lv5Posted 2026-May-13 18:41
  
The notification you are seeing from Sangfor Athena EPP is a common reaction to how modern development tools interact with the Windows shell. Security platforms are naturally "paranoid" about PowerShell because it is a powerful tool often used to execute malicious code directly in memory.

Your command is being flagged due to Heuristic Analysis. This means the security software isn't necessarily saying your command is a virus but rather that its behavior matches patterns often used by threats.

Its completely safe since you are the one initiating the git diff to inspect changes in your main_window.py file, this is a False Positive. The command is simply trying to ensure the text characters display correctly in UTF-8.

It is recommeneded to perform the following actions:

Allow the Process: You can safely click Allow to let the command finish.

Trust the Source: If this happens frequently while using Git in your terminal or IDE you may need to add your project folder or the specific powershell.exe calling pattern to the Trust List or Exclusions within the Sangfor management console.

I Can Help:

Change

Moderator on This Board

2
1
0

Started Topics

Followers

Follow

1
1
0

Started Topics

Followers

Follow

986
206
99

Started Topics

Followers

Follow

Trending Topics

Board Leaders