Health - check rules Windows audit failure event.

[cortera]

Hi Everyone,

I've been receiving numerous alerts lately, specifically:

1. Windows audit failure event (Rule ID: 60104)
2. Multiple Windows error application events (Rule ID: 61061)
3. Multiple System error events (Rule ID: 61110)

These alerts seem to stem from Windows applications crashing or failing to start properly.

I'm wondering if there's a way to customize or override these rules so that I only receive security alerts. It would be helpful to streamline the alerts to focus solely on security-related issues.

Your assistance in resolving this matter would be greatly appreciated.