In the file audit portion of ADAudit there is no way to exclude file modifications by which process changed them.  Because of this you can't filter out file changes or reads made by backup software or AV software.  This adds a tremendous amount of data that I don not want to see.

 

Can you add the ability to exclude changes from a list of executables that the user can add to or subtract from?