You wish to understand why DCS:SA 6.x Whitelisting policy warning events are blue in colour.
The Whitelisting Strategy policy is new to DCS:SA 6.0. This strategy provides protection for the operating system, and prohibits the launching of applications, except those that are explicitly listed in the policy configuration.
Applications that are not whitelisted are blocked by routing all their associated process activity to the "deny_ps" sandbox, creating a "Process Assignment" warning event that is blue in colour. The "deny_ps" sandbox does not log activity, so no additional File Access blocked event will be seen.