We have an app server that we have several in-house built applications that run fairly often. One of the processes runs every 10mins and it does a great deal at probing/beaconing out as it queries domains for DNS updates. The Insight Agent begins to run hot with each run and ends up eating resources to 50+% of the CPU.
Is there a good, clean way to exclude a single app/process/folder from the Insight Agent from watching it live?
Thanks for any direction; I’m still getting my footing with the Rapid7 tools.