Hi Mike,
For exclusions, the best place to look would be on the website for the specific webserver application you are running. The author of the software will typically have a “recommended” exclusions for AV software.
Thanks!
Jeff