Help CenterBeginning in ThreatLocker Windows Agent 10.3 and Mac Agent 4.2, you can set a path and/or process that will allow the Learning mode to begin only from that path or process.
Please Note: This option will only be visible in the sidebar of devices that are checking in with at least the minimum Agent version required.
Navigate to the Devices page.
Select the computer you wish to set a Conditional Maintenance mode on.
Select the Maintenance tab.
Select Application Control Learning Mode.
Below the Maintenance Type Dropdown, toggle on the Maintenance Mode Conditions switch.
Next, select either 'Process' or 'Path' and then input a full path into the text field.
Setting multiple conditions here will be treated as 'or' statements. The maintenance mode will begin automatically once a condition is met (within the start and end time of the maintenance mode). In our example above, when the process matches c:\program files\mycustomapp.exe, during the time window set for the maintenance mode, then Learning mode will begin.
For more information on Maintenance Modes, see the associated article: Maintenance Modes | ThreatLocker Help Center