Skip to content

Commit 40f2683

Browse files
authored
Merge pull request #53 from AndNovian/patch-1
/var/*/ exclusion example misinformation
2 parents 09e8a66 + ee52d57 commit 40f2683

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

defender-endpoint/linux-exclusions.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ ms.collection:
1515
ms.topic: conceptual
1616
ms.subservice: linux
1717
search.appverid: met150
18-
ms.date: 02/21/2024
18+
ms.date: 06/24/2024
1919
---
2020

2121
# Configure and validate exclusions for Microsoft Defender for Endpoint on Linux
@@ -60,7 +60,7 @@ File, folder, and process exclusions support the following wildcards:
6060

6161
Wildcard|Description|Examples|
6262
---|---|---
63-
\*|Matches any number of any characters including none (note if this wildcard is not used at the end of the path then it will substitute only one folder)| `/var/*/tmp` includes any file in `/var/abc/tmp` and its subdirectories, and `/var/def/tmp` and its subdirectories. It does not include `/var/abc/log` or `/var/def/log` <p> <p> `/var/*/` includes any file in `/var` and its subdirectories.
63+
\*|Matches any number of any characters including none (note if this wildcard is not used at the end of the path then it will substitute only one folder)| `/var/*/tmp` includes any file in `/var/abc/tmp` and its subdirectories, and `/var/def/tmp` and its subdirectories. It does not include `/var/abc/log` or `/var/def/log` <p> <p> `/var/*/` only includes any files in its subdirectories such as `/var/abc/`, but not files directly inside `/var`.
6464
?|Matches any single character|`file?.log` includes `file1.log` and `file2.log`, but not`file123.log`
6565
> [!NOTE]
6666
> When using the * wildcard at the end of the path, it will match all files and subdirectories under the parent of the wildcard.

0 commit comments

Comments
 (0)