Views:

You can manually add approved applications used in operations and processes into the Policy-based Approved Applications to avoid false alerts.

See the following instructions for how to add the approved applications to the Policy-based Approved Applications.

  1. Go to Agents > Policy, scroll down and find the Operations Behavior Anomaly Detection pane. Select Operations Behavior Anomaly Detection Learn, Detect, or Enforce.
  2. Toggle on the Application Behavior.
  3. Click Application Behavior to expand this section.
  4. Find and click the Policy-based Approved Applications.
  5. Click +Add and then specify the path to the application and relevant information.
  6. Click Add to add the approved application.
  7. Click Close to close the window.
    Tip:

    To delete the added applications one by one, click the Delete icon in the Actions column; to delete multiple user accounts, click the checkboxes next to them and then click Delete > Confirm.

Parent topic: Policy-based Watchlist and Approved Items