About the Script Monitoring task
When the Script Monitoring task is running, Kaspersky Security for Windows Server controls the execution of scripts created using Microsoft Windows scripting technologies (Active Scripting) such as VBScript or JScript®. The application can also process PowerShell™ scripts and scripts run in the Microsoft Office applications on operating systems with the Antimalware Scan Interface (AMSI) installed. You can allow or block execution of a script that has been found to be dangerous or probably dangerous. If Kaspersky Security for Windows Server identifies a script as potentially dangerous, it blocks or allows execution of the script according to your selected action. If the Block action is selected, the application allows script execution only if a script has been found to be safe.
Starting from the Microsoft Windows Server 2016 operating system, Kaspersky Security for Windows Server supports the Antimalware Scan Interface (AMSI). AMSI allows applications and services to integrate with any antimalware application installed on a device in order for all the executed scripts to be intercepted and scanned by the antimalware.
By default, the Script Monitoring component is not installed on the protected device as part of the application. When the Script Monitoring component is installed, the application is registered as an AMSI provider and starts to monitor executed scripts.
On devices running operating systems that do not support the AMSI feature, the use of this component may be incompatible with some of third-party applications installed on the protected device. In this case, monitoring third-party scripts can cause scripts to malfunction. We recommend that you either not use such third-party applications or disable the Script Monitoring task. If the task is disabled, security risks associated with script execution increase.
If you want to use the Script Monitoring component, you must manually select it in the list of installed components during installation of Kaspersky Security for Windows Server. By default, if the component is installed, the Script Monitoring task is automatically started when Kaspersky Security for Windows Server starts.
You can find more information about AMSI functionality on the Microsoft Windows website.
