If you find the excluded threats are malicious, you can delete the excluded threats to appear on the Monitoring dashboard.
Log on to Trellix EDR.
Click the configuration icon on the top-right corner to access the Configuration page.
Select Manage threat exclusions under Finetune configuration.
Click Delete to delete a threat from the existing threat exclusions list.
The threat deleted from the threat exclusions list is shown on the Monitoring dashboard.
On the Action History dashboard, Action Status displays the deletion of excluded threat action as Completed.
The list of excluded threats deleted from Manage threat exclusions appears on the Monitoring dashboard.