2 Replies Latest reply on Feb 10, 2010 12:07 PM by Judith Reed

    How to limit fields that audit of server processes compares against?

      I'm auditing against a snapshot of running services, to find out if Trend officescan and/or serverprotect are running. The audit flags "Changes" if the service is running from the D: drive rather than the C: drive. Frankly, I don't care where it's running from, just want to know if it's running. Is there some way to eliminate the things the audit is looking at, in particular "Binary Path"?