Allowlist an Application in Red Canary and Receive Email Alerts When That Application is Used?

Issue

We have an application that we use from time to time.  We have received threat notifications about this application in the past.  Can we add to an allowlist the application so we no longer receive threats for the application, and then only receive email notification whenever the app is used?

Environment

Red Canary

Resolution

The short answer is no. There is no way to receive an email notification without a threat.  However, you can tell Red Canary to only "observe" certain applications that we would normally consider "Potentially Unwanted Programs." To do this you would go to Analytics-->Applications from your Red Canary navigation menu.