Example searches: “severity”, “index”, “malwareHash”, “full_name”, “destIp”
Endpoint Exceptions API allows you to manage detection rule endpoint exceptions to prevent a rule from generating an alert from incoming events even when the rule's other criteria are met.