Program tab

You can choose to track or not track all file or registry changes made by a program. When a monitored process or program makes a change, an event is generated on the endpoint and sent to the ePO - On-prem server.

Add processes or programs to be included or excluded from being monitored for changes.

Option definitions

Option	Definition
Add	Opens the Add Program dialog box. Program — Specifies the process or program to be monitored for changes. Include — Monitors changes made by the specified process or program. Exclude — Excludes any specific process or program from being monitored. OK — Monitors changes done by the specified process or program. Cancel — Exits without saving the settings.
Edit	Opens the Add Program dialog box with information for a selected rule. Edit the process or program as required, then click OK.
Remove	Deletes the selected rule from the policy.