Case :
UB5.C3 Software configurations
UB5.C3.K1 – Users can add exclusions
Protection :
UB5.C3.K1.P1 – Monitor/Restrict allowed exclusions actions

Threat :
UB5.C3.K1.T1 Users could add exceptions in antivirus, anitmalware or other threat monitoring tools which would let the excluded folders or files vulnerable.