I am relatively new to working event exclusions. I have this one particular system that is generating events such as VisionGUI.NET.exe and igfxsrvc.exe. I did research on igfxsrvc.exe and found it to to have a digital signature. The other program seems legitimate. There are other programs that seem to be making registry modifications. I know that each company is different. is there a general guide to determining which applications should be making registry modifications (for example some of the microsoft / windows stuff)?