CCFA: CrowdStrike Certified Falcon Administrator

Script-Based Execution Monitoring enables Falcon sensor inspection of script and shell content, which are common mechanisms for executing malicious code. It is the monitoring/visibility setting; prevention of classified suspicious scripts and commands is controlled separately.