TEAM: Huntress Managed Endpoint Detection and Response (EDR)
PRODUCT: Huntress
ENVIRONMENT: Windows
SUMMARY: This guide goes over how account administrators can exclude entire organizations or individual hosts from Process Insights.
Hosts that are not explicitly excluded in Process Insights Exclusion Settings will be automatically eligible for Process Insights.
Account administrators can exclude entire organizations or individual hosts from Process Insights. Exclusions should be used sparingly since excluded hosts are not eligible for Process Insights.
A Process Insights Exclusion will remove the Process Insights Service "RIO" and Driver from the specified Host or Organization's Hosts.
You can access Process Insights Exclusions by visiting your account settings page and clicking the "Managed Response" tab on the left side of the page:
Please note, that the removal will only trigger when the exclusion is put in place. If you perform a system restore or backup that places RIO back on the device. It will NOT be automatically removed again. You will need to either Uninstall this service directly, or navigate back to the Exclusion, remove it and then add it back.