Rio re-enables Success auditing for Detailed File Share (Event ID 5145) to support SMB ransomware detection. On high-volume file servers, this can flood the Windows Security log and create significant SIEM storage impact.

Please add a supported per-host or per-organization exception, or another scoped control to reduce the local event and retention impact without disabling the Huntress agent. Partners should still be able to keep Event ID 5145 enabled on designated file-share servers, with a clear warning explaining any detection or visibility tradeoffs.