How to add an exclude/include filter

Start with an Example (Step 2 of 7)

Example

To demonstrate how to setup an include filter, we will use an event that occurs when a notepad.exe proccess has been created (detailed process tracking has to be enabled in the security policy of Windows for these types of events to be logged), but this example will work with any type of event.