Skip to content

Commit 34a772c

Browse files
authored
Merge pull request #65 from Mrman1093/patch-1
Remove PowerShell as code block type as it is a KQL query, not a Powe…
2 parents c353fec + ed863b9 commit 34a772c

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

defender-endpoint/controlled-folders.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ title: Protect important folders from ransomware from encrypting your files with
33
description: Files in default folders can be protected from being changed by malicious apps. Prevent ransomware from encrypting your files.
44
ms.service: defender-endpoint
55
ms.localizationpriority: medium
6-
ms.date: 03/05/2024
6+
ms.date: 07/30/2024
77
author: siosulli
88
ms.author: siosulli
99
audience: ITPro
@@ -112,7 +112,7 @@ You can query Microsoft Defender for Endpoint data by using [Advanced hunting](/
112112

113113
Example query:
114114

115-
```PowerShell
115+
```
116116
DeviceEvents
117117
| where ActionType in ('ControlledFolderAccessViolationAudited','ControlledFolderAccessViolationBlocked')
118118
```

0 commit comments

Comments
 (0)