7. A method comprising: receiving, by a device, data from an end-point device; extracting, by the device, scripted code from the data; parsing, by the device, the scripted code to generate nodes associated with identifiers; populating, by the device, a syntax tree with the nodes; generating, by the device, a normalized script based on the syntax tree; generating, by the device and based on the normalized script, a call list that includes information identifying: an ordered list of calls to functions that allow the scripted code to interact with an environment, a quantity of the calls to the functions, and one or more arguments passed to the functions, the functions being provided by the environment; determining, by the device, whether the call list matches a signature; and selectively sending, by the device, the data to another end-point device, associated with the data, based on determining whether the call list matches the signature, the data being sent to the other end-point device based on determining that the call list does not match the signature, and the data not being sent to the other end-point device based on determining that the call list matches the signature.
7. A method comprising: receiving, by a device, data from an end-point device; extracting, by the device, scripted code from the data; parsing, by the device, the scripted code to generate nodes associated with identifiers; populating, by the device, a syntax tree with the nodes; generating, by the device, a normalized script based on the syntax tree; generating, by the device and based on the normalized script, a call list that includes information identifying: an ordered list of calls to functions that allow the scripted code to interact with an environment, a quantity of the calls to the functions, and one or more arguments passed to the functions, the functions being provided by the environment; determining, by the device, whether the call list matches a signature; and selectively sending, by the device, the data to another end-point device, associated with the data, based on determining whether the call list matches the signature, the data being sent to the other end-point device based on determining that the call list does not match the signature, and the data not being sent to the other end-point device based on determining that the call list matches the signature. 9. The method of claim 7 , further comprising: interpreting a portion of the scripted code in the environment; observing an interaction between objects of the interpreted portion of the scripted code and between the portion of the scripted code and the environment; modifying, to obtain a modified portion of the scripted code, the portion of the scripted code based on the interaction; and generating the normalized script being based on the modified portion of the scripted code.