Incident still created after creating custom exclusion rule.

scoles_inoc

I seem to be getting incidents for screen capture despite having an exclusion set.

I have the following exclusion rule set:

custom-rule.png

However, I am still getting incidents for the exact command line that is in the rule:

edr-screencapture-2-event.png

Can someone please advise why this is still occurring?

Alex_Dr

Hello @scoles_inoc,

In this case i highly recommend getting in touch with the Enterprise Support Team so they can troubleshoot this properly, with logs and samples from the detected files.

You can create a case from the GravityZone Help Session or from the following link, via e-mail or phone -> https://www.bitdefender.com/business/support/en/71263-85158-contact.html

I am waiting for updates on your part regarding this, so we can fix it as soon as possible.

Thank you!

Alex D.