Detection exclusions criteria

•Path—Detection exclusion for a specified path (or any if left empty)

•Detection name—A detected object will be excluded if it matches the defined detection name. If the file is later infected with other malware, its detection name will change; thus, it will be detected as infiltration, and proper action will be taken against it. If Path is defined, only files located at that path and matching the Detection name will be excluded from detection. To add such detections to the exclusion list, use the detection exclusion wizard. Alternatively, navigate to Quarantine, click a quarantined file, and select Restore and exclude. This option is displayed only for items the detection engine evaluated as eligible for exclusion.

•Hash—Excludes a file based on a specified hash (SHA1 or SHA256), regardless of the file type, location, name, or extension