EDR "Any Script"

[jrpayne]

I wanted to reach out an get some opinions. I am relatively new to EDR and I am wondering if there is ever a safe use of "any script" in an exception?

[mvatansever]

Hello,

In FortiEDR, you can link an alert to a playbook. This playbook operates as a Python script. There are several pre-built custom playbooks available within the panel. Additionally, you can obtain a remote shell through the agent to perform file transfers and execute scripts.
Playbook Actions: https://docs.fortinet.com/document/fortiedr/6.2.0/administration-guide/575440/playbook-policy-action...