Proper Safelisting When Threat Hunting