Is there any way to check whether your filter is working?
Like being able to see how many times it activated?
The obvious one is to see if your count of filtered events goes down but I am trying to block Malware events from a specific device. There are likely other devices contributing to the count so I want to know if I can see that it is blocking the ones I want?
Or just wait and see if they disappear altogether