Skip to content

Commit 05113db

Browse files
committed
Edits
1 parent 9e7ccfb commit 05113db

File tree

2 files changed

+2
-2
lines changed

2 files changed

+2
-2
lines changed

defender-xdr/custom-detection-manage.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ ms.topic: how-to
2525
ms.date: 05/07/2025
2626
---
2727

28-
## Manage existing custom detection rules
28+
# Manage existing custom detection rules
2929

3030
[!INCLUDE [Microsoft Defender XDR rebranding](../includes/microsoft-defender.md)]
3131

defender-xdr/custom-detection-rules.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -271,7 +271,7 @@ Only data from devices in the scope will be queried. Also, actions are taken onl
271271
After reviewing the rule, select **Create** to save it. The custom detection rule immediately runs. It runs again based on configured frequency to check for matches, generate alerts, and take response actions.
272272

273273
> [!IMPORTANT]
274-
> Custom detections should be regularly reviewed for efficiency and effectiveness. For guidance on how to optimize your queries, follow the **[Advanced hunting query best practices](advanced-hunting-best-practices.md)**. To make sure you're creating detections that trigger true alerts, take time to review your existing custom detections by following the steps in **[Manage existing custom detection rules](#manage-existing-custom-detection-rules)**.
274+
> Custom detections should be regularly reviewed for efficiency and effectiveness. For guidance on how to optimize your queries, follow the **[Advanced hunting query best practices](advanced-hunting-best-practices.md)**. To make sure you're creating detections that trigger true alerts, take time to review your existing custom detections by following the steps in **[Manage existing custom detection rules](custom-detection-manage.md)**.
275275
>
276276
> You maintain control over the broadness or specificity of your custom detections so any false alerts generated by custom detections might indicate a need to modify certain parameters of the rules.
277277

0 commit comments

Comments
 (0)