Good morning,

I am reaching out to request clarification regarding detections.

In short, I ran a script on my workstation that I knew would be classified as a potential malware by the endpoint. Upon receiving the notification, I selected the option to mark the file as trusted, and everything proceeded as expected.

However, when I accessed the Xcitium Enterprise management platform to review the related activity on my workstation, I could not find any logged record of the event. Is this behavior normal?

I appreciate your support and look forward to your response.

Best regards,

Marco Rasore