A SOC analyst notices that a legitimate internal vulnerability scanner running from a known server generates dozens of 'Suspicious network scanning activity' alerts in Microsoft Defender XDR every day. The scanner's behavior is expected and approved. The analyst wants to stop these specific alerts from being raised for this server going forward, while keeping the same detection active for all other devices in the organization. Which action should the analyst take in the Microsoft Defender portal?