Skip to content

Commit 3893b42

Browse files
committed
Learn Editor: Update indicator-file.md
1 parent e5ccfd8 commit 3893b42

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

defender-endpoint/indicator-file.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -63,8 +63,10 @@ Understand the following prerequisites before you create indicators for files:
6363

6464
- To start blocking files, [turn on the "block or allow" feature](advanced-features.md) in Settings (in the [Microsoft Defender portal](https://security.microsoft.com), go to **Settings** > **Endpoints** > **General** > **Advanced features** > **Allow or block file**).
6565

66-
This feature is designed to prevent suspected malware (or potentially malicious files) from being downloaded from the web. It currently supports portable executable (PE) files, including `.exe` and `.dll` files. Coverage is extended over time.
66+
This feature is designed to prevent suspected malware (or potentially malicious files) from being downloaded from the web.
6767

68+
> [!NOTE]
69+
> File indicators support portable executable (PE) files, including `.exe` and `.dll` files only.
6870
> [!IMPORTANT]
6971
> In Defender for Endpoint Plan 1 and Defender for Business, you can create an indicator to block or allow a file. In Defender for Business, your indicator is applied across your environment and cannot be scoped to specific devices.
7072

0 commit comments

Comments
 (0)