Forum Discussion
Unusual volume of file deletion
Our company is starting to get alot of alerts regarding 'Unusual volume of file deletion'. It seems like every deletion path is c\users\appdata\local or c\users\appdata\local As we investigate, the...
We've just started receiving hundreds of these alerts too, starting on September 6, I just had to turn this alert policy completely off.
Yeah, I started getting these again this morning, and have received 18 alert emails in the past 4 hours.
- This is insane, the amount of false positives blowing up my mailbox. Has anyone made a custom alert for this that excludes the file path? I cannot seem to figure out how to add a path with wildcard for userprofile as an exception.
