Views:

You can specify policy-based watchlist for monitoring fileless attacks, or policy-based approved login accounts or applications to avoid false alerts at the agent or group level.

Related settings include: