1. A method of reducing false positive security violation responses comprising: receiving by a processor of a computer system a first information regarding a computer security event associated with an operation of a computer system; identifying, by the processor, a security rule of a collection of security rules, the security rule corresponding to the computer security event; determining, by the processor, whether automatic generation of exceptions to the security rule is allowed; generating, by the processor, a security violation response to the computer security event responsive to a determination that the security rule does not allow automatic generation of exceptions; creating, automatically by the processor, an exception to the security rule, responsive to a determination that the security rule allows automatic exception generation; offering a user an opportunity to exclude the exception from a database of rule exceptions; storing the exception as an entry in the database of rule exceptions; and using the stored exception to avoid a security violation response to a future computer security event.