Remediation script requirements

A remediation script can be an executable, or it can be a script written in an interpreted language.

The following scripting languages and language interpreters can be used to write remediation scripts without installing additional software:
  • Windows - CMD Shell (.bat, .cmd)
  • Windows & Linux - Python 2.5.4 (.py)
  • Windows executable (.exe, .com)
  • Linux ELF executable
  • Linux BASH scripts

Other interpreted languages may be used, but they require installation of additional software. Make sure that the language interpreter is correctly installed on the server.

  • For network discovery, the language interpreter must be installed on all crawler machines.
  • For endpoint discovery, the language interpreter must be installed on all endpoint machines.

Because DLP and discovery incidents can occur on both Windows and Linux machines, it is highly desirable to write these scripts in Python—a language available on Windows and Linux servers as well as all endpoints as part of the Forcepoint DLP installation. In most cases, the same Python script can be used across operating systems without amendments.

The samples provided in this document are written in Python.