topic Re: Create exclusion for specific process in Endpoint

Create exclusion for specific process

DanielTveriya — Tue, 18 Nov 2025 12:16:48 GMT

Hi,

I am having trouble excluding processes that Harmony EDR blocks.
The Protection name is: RAT_Linux_NukeSped_D
I tried a few exclusions, but it didn't work.

It's happening when we're running a build with Docker on Linux endpoints.
In the log, it shows 2 preventive actions.

My goal is to exclude this kind of process and not all the Protection name.

Thanks

Re: Create exclusion for specific process

the_rock — Tue, 18 Nov 2025 19:55:24 GMT

Does it give an option anywhere from the log itself to add an exception?

Re: Create exclusion for specific process

DanielTveriya — Wed, 19 Nov 2025 08:19:57 GMT

Hi Andy,
No, its not supported with creation of rule from logs view, becasue its linux agent.

Re: Create exclusion for specific process

the_rock — Wed, 19 Nov 2025 11:50:26 GMT

Understood Daniel. Maybe worth TAC case to confirm.

Re: Create exclusion for specific process

lluner — Wed, 19 Nov 2025 12:09:57 GMT

@DanielTveriya

Right-clicking on the "prevent" alert (as shown in the image) does not display the exclusion option ?

Re: Create exclusion for specific process

DanielTveriya — Wed, 19 Nov 2025 12:15:20 GMT

Thanks Andy

Yes, I spoke with the support team, and they are testing it internally.

Re: Create exclusion for specific process

DanielTveriya — Wed, 19 Nov 2025 12:17:00 GMT

Hi @lluner

Unfortunately, this type of process is not supported for Linux endpoints.

Thanks

Re: Create exclusion for specific process

lluner — Wed, 19 Nov 2025 12:30:02 GMT

@DanielTveriya

You can create the exclusion; the link for help is below.

sk181679 - Smart Exclusions - Syntax and Supported Capabilities for Exclusion Types

Re: Create exclusion for specific process

the_rock — Wed, 19 Nov 2025 12:36:53 GMT

Let us know how it goes.

Re: Create exclusion for specific process

DanielTveriya — Thu, 20 Nov 2025 16:09:38 GMT

@lluner

Thanks, my friend.

Yesterday I excluded the path for this process and it worked,

Wanted to update after I received feedback from the user.

Thanks for the help

Re: Create exclusion for specific process

the_rock — Thu, 20 Nov 2025 16:11:04 GMT

Excellent, thanks for letting us know!