Can You Whitelist an Application in Red Canary and then Only Receive Email Alerts When That Application is Used?

Issue

We have an application that we use from time to time.  We have received threat notifications about this application in the past.  Can we whitelist the application so we no longer receive threats for the application, and then only receive email notification whenever the app is used?

Environment

Red Canary

Resolution

The short answer is no. There is no way to receive an email notification without a threat.  However, you can tell Red Canary to only "observe" certain applications that we would normally consider "Potentially Unwanted Programs." To do this you would go to the Red Canary > Applications page.