MOOD SARAH L

System and method for monitoring events on a computer to reduce false positive indication of pestware