Adding Process Exclusions to Selected Host Sets

Log in to the Web UI as an administrator.

From the Admin menu, select Policies to access the Policies page.

From the Policies table, select the link for the custom policy you want to modify.

Select the Real-Time Indicator Detection tab.

Verify that the Real-Time Indicator Detection ON/OFF switch is set to ON.

From the Exclude Processes from Real-Time Indicator Detection section, specify the full path of the executable file you want to exclude from real-time indicator detection in the Exclude Processes from Real-Time Indicator Detection field. You can specify the absolute file path or use Windows System variables to define the executable file path.

For example, adding C:\windows\system32\notepad.exe or %windir%\system32\notepad.exe to the process exclusion list will exclude notepad.exe from real-time event monitoring. The executable file path is not case sensitive.

Click Add.

Click Save.