Defend exclusion by parent signature?

Rule exceptions are as you describe. Endpoint Exceptions are processed on-Endpoint before potentially generating any alerts or blocking behavior.

Related discussion.

1 Like