"Norton AntiVirus notifies you about the low-certainty threats that SONAR detects the first time. You can then allow or block the suspicious activities. When you allow an event, Norton AntiVirus adds the event details in the list of approved events that the Advanced heuristic engine uses for threat detection. After Norton AntiVirus includes the details of the event in the list, the Advanced heuristic engine ignores such event in the future. Norton AntiVirus does not notify when SONAR detects the event the next time."
How do I check the “list of approved events that the Advanced heuristic engine uses for threat detection”.