DiscoveryAgent.exe (a Kaseya product called VulScan) is detecting as full blown Kaseya VSA. A separate product category would be helpful. We have an instance where we need DiscoveryAgent.exe running from the standard paths
  1. Program Files (x86)\DiscoveryAgent\Agent\bin\DiscoveryAgent.exe
  2. Program Files (x86)\DiscoveryAgent\Agent\bin\NetworkDetectiveInspector.exe
But we also do not want to whitelist all of Kaseya (VSA). So having a secondary named product could be helpful for differentiating rules.

Photo Viewer

View photos in a modal