Issue
We do not want to report on known good users in our compromise Reports.
Problem
Once we add a domain @domain.com to be monitored, we monitor all aliases on that domain. There is no way to filter out single users.
Resolution
Switch from monitoring the domain to monitoring individual users.
For domain monitoring we might enter like such.
Domains: @domain.com
Personal Email Addresses: username@domain.com