3 Replies Latest reply on Aug 22, 2017 8:23 AM by bretzeli

    Eliminate events that are not useful

      I am trying to eliminate the following events and just need a sanity check that I'm using the correct process



      Object Name: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ialm\Device0


      My reports are indicating


      Solidcore: Top 10 Programs with Most Change

      C:\WINDOWS\system32\igfxsrvc.exe (Program name)  5994 events

      Solidcore: Top 10 Change Events in the Last 7

      HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ialm\Device0 (Object name) 7333 events


      So to eliminate I go my Integrity Monitor policy and edit the advanced filters  



      I'm obviously doing something wrong as the events are still building - can any advise


      Message was edited by: jezzaf Whilst clicking around I found the following, can one explain the following and how they are applied - also are there any manuals for solidcore all i have is monitor Evaluation Guide which is a some brief on 21/03/11 10:25:56 CDT