Installed Software white Listing

We are looking for a way to determine if any unauthorized software has been installed on a server monitored via CSP.

We have a list of software packages that are allowed and would like to generate an alert if something not on the list is installed.

Is there a policy already created that can come close or do we need to create a custom policy?

I see that there are file and folder watch capabilities that may be able to pull this off, but not without a lot of configuration.

Thanks in Advance

Rob