We recommend all files from the following directories to be excluded from the scan

/etc/centrifydc
/etc/centrifyda
/var

/var is for run time (/var/centrifydc, /var/centrify, /var/centrifyda) files are generate at run time. They should be excluded from indexing.

Lastly, there are some (system) files that we modify in flight i.e., /etc/pam.d/system-auth, nsswitch.conf, krb5.conf , krb5.keytab, etc. these should be excluded as well.

We recommend all files from the following directories to be excluded from the scan

C:\ProgramData\Centrify\DirectAuthorize
C:\ProgramData\Centrify\DirectAudit

Also, please exclude the Centrify Agent logger's target directory (log files location) from the scan as its contents are constantly changing.

C:\Program Files\Common Files\Centrify Shared\Logs\