I'm not sure exactly what happens with an application that is excluded from checking in IMON, so I can't answer this question for myself. What I'm interested in doing excluding the file creation and modification activities of a known internet application. I also know what directories will be used for these activities. So, it appears, on the surface at least, to me that I could either exclude the application from IMON or exclude the directory from AMON. or both. Also, I don't want IMON scanning data destined for this application as it arrives. HOWEVER - I do want AMON to vet the file if it opened by application other than the creating application. Is this doable? and how?