Skip to content

Commit 7c984bb

Browse files
committed
Learn Editor: Update manage-indicators.md
1 parent 0fa3729 commit 7c984bb

File tree

1 file changed

+4
-3
lines changed

1 file changed

+4
-3
lines changed

defender-endpoint/manage-indicators.md

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -150,9 +150,10 @@ The functionality of pre-existing IoCs won't change. However, the indicators wer
150150
The IoC API schema and the threat IDs in advance hunting are updated to align with the renaming of the IoC response actions. The API scheme changes apply to all IoC Types.
151151

152152
> [!NOTE]
153-
>
154-
> There is a limit of 15,000 indicators per tenant. File and certificate indicators do not block [exclusions defined for Microsoft Defender Antivirus](/windows/security/threat-protection/microsoft-defender-antivirus/configure-exclusions-microsoft-defender-antivirus). Indicators are not supported in Microsoft Defender Antivirus when it is in passive mode.
155-
>
153+
> There is a limit of 15,000 indicators per tenant. Increases to this limit are not supported.
154+
>
155+
> File and certificate indicators do not block [exclusions defined for Microsoft Defender Antivirus](/windows/security/threat-protection/microsoft-defender-antivirus/configure-exclusions-microsoft-defender-antivirus). Indicators are not supported in Microsoft Defender Antivirus when it is in passive mode.
156+
>
156157
> The format for importing new indicators (IoCs) has changed according to the new updated actions and alerts settings. We recommend downloading the new CSV format that can be found at the bottom of the import panel.
157158
158159
## Known issues and limitations

0 commit comments

Comments
 (0)