Kaspersky Endpoint Security for Windows 11.7.0

PREVENTION. Managing Execution prevention

Disable Execution Prevention or show the current component settings, including the list of execution prevention rules.

Command syntax

Upon executing the prevention /show command, you will get the following response:

prevention.enable=true|false

prevention.mode=audit|prevent

prevention.rules

id: <rule ID>

target: script|process|document

md5: <MD5 hash of the file>

sha256: <SHA256 hash of the file>

pattern: <path to the object>

case-sensitive: true|false

Command return values:

• -1 means the command is not supported by the version of Kaspersky Endpoint Agent that is installed on the device.
• 0 means the command was executed successfully.
• 1 means a mandatory argument was not passed to the command.
• 2 means a general error occurred.
• 4 means there was a syntax error.
• 9 – wrong operation (for example, an attempt to disable the component when it is already disabled).