Files Instances Affected

When you discard files for Full OS Inventory Tracking, instances of files that meet all of the following criteria are no longer tracked:

• The publisher must be "Microsoft Windows" or "Microsoft Corporation". This includes directly signed files and those signed with a detached publisher. Files signed by other Microsoft publishers, even if legitimate, continue to be tracked.
• The file must be a support file, such as a .DLL, that is usually considered interesting and therefore tracked by Carbon Black App Control. Tracking of .EXE files or the events related to them is not affected by this option.
• The file must be locally approved either directly or because of an approval rule.