Microsoft Defender for Identity - new exclusion settings now in Public Preview

Hmm... I think we're still needing a more granular exclude rule set, where we can exclude a particular user account doing something to or on particular devices for particular rules. I.e., Ignore any alerts raised for svc_vulnerabilityscanner running on Server001 for the Remote code execution attempt rule but raise an alert if svc_vulnerabilityscanner attempts a Remote code execution on Server002. Globally excluding across all rules might mean we miss something?