You can set the base image for your enterprise to create an approved repository of known applications.
If the inventory for an endpoint in your setup includes known and trusted applications, you can set it as a base image for your enterprise. This creates an approved repository of known applications, including internally developed, recognized, or trusted (from a reputed vendor) applications. Also, this makes management of desktop systems easier by verifying the corporate applications.
On the ePO - On-prem console, select Menu → Application Control → Inventory → By Systems to display the endpoints in your setup.
Navigate to the endpoint where the known and trusted applications exist.
Select Mark Trusted for the endpoint.
This recategorizes all unknown executables (binaries, libraries, and drivers) and scripts on the endpoint as trusted files and edits the enterprise trust level for the files. No changes are made to the malicious executable file or script files on the endpoint.