Hey
Kinda new with this so if someone could help out. We keep getting allert for one file:
Backdoor.PCClient.TCB C:\Users\user.name\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\000004A8.bin
I have tried to create exception to the profile that this computer uses:
%allusersprofile%\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\*.bin
C:\Users\user.name\AppData\Local\Microsoft\OneNote\16.0\cache\tmp\*.bin
But neither of these seems to work... still getting the alerts. Any ideas?