Forum Discussion
Unusual volume of file deletion
Our company is starting to get alot of alerts regarding 'Unusual volume of file deletion'. It seems like every deletion path is c\users\appdata\local or c\users\appdata\local As we investigate, the...
Yeah, I started getting these again this morning, and have received 18 alert emails in the past 4 hours.
This is insane, the amount of false positives blowing up my mailbox. Has anyone made a custom alert for this that excludes the file path? I cannot seem to figure out how to add a path with wildcard for userprofile as an exception.