Inspect Question

[Microbe 7]

Hi ESET Team, 

 

We've got the query from our client, see the below information:

 

Can anyone assist us providing the HTML Syntax to create a rule or exclusion in Inspect.

 

 

The MSP client  is using Datto as their RMM. Each time they run any scripts/ etc from their RMM to their clients’ devices, it triggers an incident.

 

 

They would like to create an exclusion rule so that if the parent process equals file ‘aemagent.exe’ to ignore.

 

 

 

 

 

Is this possible or what do they recommend.

 

Cheers, 

Gil

[Microbe 7]

Hi ESET Team,

Can anyone help us?

 

Cheers, 

Gil

[Marcos 5,468]

What EI rule was triggered? Could you please provide a couple of screenshots of the detection details (as you scroll down) as well as the exclusion criteria?

[Microbe 7]

Checking with MSP, will advise as soon as we receive a response, thanks!