Feature Request: Add allow rules in the background for all endpoints individually to review later

[haroondilshad]

I would like to reference #540 here and request a feature. I originally thought passive mode will silently allow and add rules individually for all processes and the endpoints they are contacting but I was wrong after reading the referenced issue. It's next to impossible to review everything while it happens so you are left with either drop everything or accept everything. I think it makes a lot of sense to add one more condition on top that keeps adding all these endpoints as allow rules corresponding to their respective programs so that the user can decide at a later date which endpoints to deny.