Moved to HIPs for better support
Best practice is use Adaptive Mode for a period of time in a testing environment (1-3+ users) before you enable/roll out HIPS.
Adaptive mode will auto create rules for you and make your life easier. After the rules have been created you can login to ePO and then look on the rules created and decide which rules to keep or delete.
check your dashboards, tune out the noise on a regular basis