Want to use an inverted filter for Detection cause.

[binaryp 0]

I get a lot of repeated daily detections for just esetipblacklist.A and Win32/Botnet.generic.

It's easy to create a filter FOR these, but how do I create a filter for... not these?

I tried to create a dynamic group to exclude specific causes but causes isn't available! It's not very granular at all.

Any help?

[Marcos 5,461]

Would removing "Firewall" detections from the filter work for you?