Limit notifications for a specific extension (like .ODIN for ransomware).
Send notification on modification/creation of files with a specific extension (like .ODIN for ransomware).
1
vote
![](https://secure.gravatar.com/avatar/192a73c7d84991f9938f8727f22032ec?size=40&default=https%3A%2F%2Fassets.uvcdn.com%2Fpkg%2Fadmin%2Ficons%2Fuser_70-6bcf9e08938533adb9bac95c3e487cb2a6d4a32f890ca6fdc82e3072e0ea0368.png)
This is already available via include and exclude patterns.: https://deventerprise.uservoice.com/knowledgebase/articles/196135-exclude-and-include-patterns
To limit events to only .odin files, simply add *.odin to the include filter list.