File exclude from Malware analysis?

[JayWatson]

I have recent deployment of NW Malware appliance and it is picking up an unusually high number of High Confidence events. Some of the files it has detected are in-house custom scripts or applications. Is there a way to exclude these files from being analysed and therefore creating events?

[EricPartington]

https://community.rsa.com/community/products/netwitness/blog/2016/12/23/malware-spectrum-whats-involved 

if you create an app rule to flag those items as content=spectrum.filter then they should be removed from the processing pipeline

https://community.rsa.com/docs/DOC-80755 

[JayWatson]

Thanks, seems so easy. Appreciate the response.