Add the capability to whitelist, turn off or filter detection for known/trusted programs to avoid future incidents.