Most programs, also include windows files, will only run an excutable process - itself only, no other dangerous action followed.
But in paranoiac mode, such action will trigger an D+ alert and generate a rules.
Day after day, we need to create enormous rules for various programs, just because it will run itself…
Is it really necessary to monitor such actions? What’s the risk of program A run himself …?