Michael002

Thank you for clarifying.

Thank you for your response. So the conclusion of it is to separate them and create one exclusion for [F0413b][C] and one exclusion for [D1206]? Just to be sure. And thank you for the update reminder... I know about it.

Hello, I would like to ask, if I want to create an exclusion for two different rules that have different trigger events, let's say I would like to add into exclusion CodeInjection for rule [F0413b][C] and for rule [D1206] I would like to add trigger event DllLoaded into exclusion. Is it possible to add two operations like this into the exclusions?