Hello,
Today I discovery a user executing a script to kill process Netskope.
He´s Admin local of computer (Macbook). Exist some way of block this script through of panel?
if [ "$EUID" -ne 0 ]
then echo "Please run as root"
exit
fi
NETSKOPE_PIDS="`ps aux | grep -i /opt/netskope | awk '{print $2}' | sed '$d'`"
for line in $NETSKOPE_PIDS
do
kill -9 $line
done
It seems Netskope now uses the endpoint security extension (as opposed to the Network extension), "systemextensionsctl list"
That being said, if you enable SIP, the netskope process is protected and cannot be terminated.
If you haven't already registered, now is a good time to do so. After you register, you can post to the community, receive email notifications, and lots more. It's quick and it's free! Create an account
Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.
