With the introduction of Accepted Behavior, it is now possible to create suppression rules which can accept the behavior of a user or a process. This can significantly aid in silencing BCDs for expected behavior.
Read the full article here: https://community.withsecure.com/en/kb/articles/31324-elements-edr-new-feature-accepted-behaviour
