“Then I think setting up AppSensor, do it as a proof of concept and then add one exception and see what data you generate.”

Transcript evidence from John Melton -- #OWASP AppSensor.