splunk-security_content/lookups/rare_process_allow_list_default.csv

1	process	allow_list
2	splunk-regmon.exe	true
3	winword.exe	true
4	excel.exe	true
5	outlook.exe	true
6	powerpnt.exe	true
7	visio.exe	true