Provide alerting on events that have a persistent flag being captured in Antivirus events; such as an exploit that keeps trying to be triggered after a certain threshold.