Some of our antimalware like SentinelOne actually does this by default though we have switched it off for privacy reasons (EU)