As far as an improvement regarding ThreatLocker Cyber Hero MDR, there are still some things that, out of the box, it would be nice to have a more fine-grained ability to create certain exclusions. Currently, that is something we have to work on with them when you get an alert, and we can't define or see some of those exclusions on our end. It has to be done in conjunction with them, and it would be nice to have the improvement where we can see those things in our portal or even define some at a very granular level, such as when a particular user is granted remote access to an environment. There were users or new hires that were granted remote access, which then generated an alert from the MDR team. We confirmed that those things were okay, but finding a more granular way to specify that these actions are allowed under very specific circumstances would be beneficial. Again, we are eliminating false positives, but we get very few now anyway since we've been using the product for almost a year.
