Limit notifications for a specific extension (like .ODIN for ransomware).
Send notification on modification/creation of files with a specific extension (like .ODIN for ransomware).
1
vote
sdh
shared this idea
This is already available via include and exclude patterns.: https://deventerprise.uservoice.com/knowledgebase/articles/196135-exclude-and-include-patterns
To limit events to only .odin files, simply add *.odin to the include filter list.