Skip to content

Commit 34d929f

Browse files
authored
Update live response documentation with links and formatting
1 parent f9a57ed commit 34d929f

File tree

1 file changed

+10
-8
lines changed

1 file changed

+10
-8
lines changed

defender-endpoint/live-response.md

Lines changed: 10 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ ms.collection:
1414
ms.topic: conceptual
1515
ms.subservice: edr
1616
search.appverid: met150
17-
ms.date: 04/03/2024
17+
ms.date: 12/30/2024
1818
---
1919

2020
# Investigate entities on devices using live response
@@ -124,9 +124,9 @@ The dashboard also gives you access to:
124124
> [!NOTE]
125125
> Live response actions initiated from the Device page are not available in the machineactions API.
126126
127-
1. Sign in to Microsoft Defender portal.
127+
1. Sign in to [Microsoft Defender portal](https://security.microsoft.com).
128128

129-
2. Navigate to **Endpoints > Device inventory** and select a device to investigate. The devices page opens.
129+
2. Navigate to **Endpoints** > **Device inventory** and select a device to investigate. The devices page opens.
130130

131131
3. Launch the live response session by selecting **Initiate live response session**. A command console is displayed. Wait while the session connects to the device.
132132

@@ -234,19 +234,21 @@ Live response allows PowerShell scripts to run, however you must first put the f
234234
You can have a collection of PowerShell scripts that can run on devices that you initiate live response sessions with.
235235

236236
#### To upload a file in the library
237-
Note: There are restrictions on the characters that can be uploaded to the library. Please use alphanumeric characters and some symbols(-, _, .).
238237

239-
1. Click **Upload file to library**.
238+
> [!NOTE]
239+
> There are restrictions on the characters that can be uploaded to the library. Use alphanumeric characters and some symbols(`-`, `_`, or `.`).
240+
241+
1. Select **Upload file to library**.
240242

241-
2. Click **Browse** and select the file.
243+
2. Select **Browse** and select the file.
242244

243245
3. Provide a brief description.
244246

245247
4. Specify if you'd like to overwrite a file with the same name.
246248

247249
5. If you'd like to be, know what parameters are needed for the script, select the script parameters check box. In the text field, enter an example and a description.
248250

249-
6. Click **Confirm**.
251+
6. Select **Confirm**.
250252

251253
7. (Optional) To verify that the file was uploaded to the library, run the `library` command.
252254

@@ -255,7 +257,7 @@ Note: There are restrictions on the characters that can be uploaded to the libra
255257
Anytime during a session, you can cancel a command by pressing CTRL + C.
256258

257259
> [!WARNING]
258-
> Using this shortcut will not stop the command in the agent side. It will only cancel the command in the portal. So, changing operations such as "remediate" may continue, while the command is canceled.
260+
> Using this shortcut will not stop the command in the agent side. It only cancels the command in the portal. So, changing operations such as "remediate" may continue, while the command is canceled.
259261
260262
## Run a script
261263

0 commit comments

Comments
 (0)