When trying to save an Expert Rule it fails with "Cannot Approve An Execution" error pop-up
This occurs when trying to include Approve actions to Execute operations.
Approving and marking files as Installers should happen during file creation (or write operations), not during execution. Approving a file on execution will cause the Agent to stall operations every time the file is executed to allow for analysis in-line. This will lead to performance issues on the endpoint.
Instead, Files should be issued an Approval on write operations. This allows for