I have been working on a script that will provide some baseline information once a potential threat has been identified by Symantec Endpoint Protection.  Currently, when either the user or helpdesk are made aware of a potential threat on a workstation, this script must be launched manually.  Does anyone know of a way to trigger a script to run once SEP has identified a potential threat on the workstation?