We started using Exploit Prevention recently, and so far it's only caught false positives. Some of the users have really been racking up the event counters. We've made exceptions for these things now, and would like the counters to go back to 0 for these users. I see no way in the enterprise console to do this. The EP events don't show up in the computer's normal "Resolve events and errors" dialog. Why that is also - I dont know.
Can someone help out?
Thanks!
This thread was automatically locked due to age.