Skip to content

Commit bbd8303

Browse files
committed
Update linux-exclusions.md
1 parent 59e7aba commit bbd8303

File tree

1 file changed

+76
-68
lines changed

1 file changed

+76
-68
lines changed

defender-endpoint/linux-exclusions.md

Lines changed: 76 additions & 68 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ ms.collection:
1515
ms.topic: conceptual
1616
ms.subservice: linux
1717
search.appverid: met150
18-
ms.date: 02/18/2025
18+
ms.date: 02/19/2025
1919
---
2020

2121
# Configure and validate exclusions for Microsoft Defender for Endpoint on Linux
@@ -181,105 +181,113 @@ Create a dynamic Microsoft Entra group that uses the operating system type to en
181181
For more information refer: [Manage endpoint security policies in Microsoft Defender for Endpoint](/defender-endpoint/manage-security-policies#create-an-endpoint-security-policy).
182182

183183
### Using the command line
184+
184185
Run the following command to see the available switches for managing exclusions:
185-
> [!NOTE]
186-
> `--scope` is an optional flag with accepted value as `epp` or `global`. It provides the same scope used while adding the exclusion to remove the same exclusion. In the command line approach, if the scope isn't mentioned, the scope value is set as `epp`.
187-
> Exclusions added through CLI before the introduction of `--scope` flag remain unaffected and their scope is considered `epp`.
188186

189187
```bash
190188
mdatp exclusion
191189
```
192190

191+
> [!NOTE]
192+
> `--scope` is an optional flag with accepted value as `epp` or `global`. It provides the same scope used while adding the exclusion to remove the same exclusion. In the command line approach, if the scope isn't mentioned, the scope value is set as `epp`.
193+
> Exclusions added through CLI before the introduction of `--scope` flag remain unaffected and their scope is considered `epp`.
194+
193195
> [!TIP]
194196
> When configuring exclusions with wildcards, enclose the parameter in double-quotes to prevent globbing.
195197
196-
Examples:
198+
This section includes several examples.
197199

198-
- Add an exclusion for a file extension *(Extension exclusion isn't supported for global exclusion scope)*:
200+
#### Example 1: Add an exclusion for a file extension
199201

200-
```bash
201-
mdatp exclusion extension add --name .txt
202-
```
202+
You can add an exclusion for a file extension. Keep in mind that extension exclusions aren't supported for the global exclusion scope.
203203

204-
```console
205-
Extension exclusion configured successfully
206-
```
204+
```bash
205+
mdatp exclusion extension add --name .txt
206+
```
207+
208+
```console
209+
Extension exclusion configured successfully
210+
```
207211

208-
```bash
209-
mdatp exclusion extension remove --name .txt
210-
```
212+
```bash
213+
mdatp exclusion extension remove --name .txt
214+
```
211215

212-
```console
213-
Extension exclusion removed successfully
214-
```
216+
```console
217+
Extension exclusion removed successfully
218+
```
215219

216-
- Add or Remove an exclusion for a file *(File path should already be present in case of adding or removing exclusion with global scope)*:
220+
#### Example 2: Add or remove a file exclusion
217221

218-
```bash
219-
mdatp exclusion file add --path /var/log/dummy.log --scope epp
220-
```
222+
You can add or remove an exclusion for a file. The file path should already be present if you're adding or removing an exclusion with the global scope.
221223

222-
```console
223-
File exclusion configured successfully
224-
```
224+
```bash
225+
mdatp exclusion file add --path /var/log/dummy.log --scope epp
226+
```
225227

226-
```bash
227-
mdatp exclusion file remove --path /var/log/dummy.log --scope epp
228-
```
228+
```console
229+
File exclusion configured successfully
230+
```
231+
232+
```bash
233+
mdatp exclusion file remove --path /var/log/dummy.log --scope epp
234+
```
229235

230-
```console
231-
File exclusion removed successfully"
232-
```
236+
```console
237+
File exclusion removed successfully"
238+
```
233239

234-
```bash
235-
mdatp exclusion file add --path /var/log/dummy.log --scope global
236-
```
240+
```bash
241+
mdatp exclusion file add --path /var/log/dummy.log --scope global
242+
```
237243

238-
```console
239-
File exclusion configured successfully
240-
```
244+
```console
245+
File exclusion configured successfully
246+
```
241247

242-
```bash
243-
mdatp exclusion file remove --path /var/log/dummy.log --scope global
244-
```
248+
```bash
249+
mdatp exclusion file remove --path /var/log/dummy.log --scope global
250+
```
245251

246-
```console
247-
File exclusion removed successfully"
248-
```
252+
```console
253+
File exclusion removed successfully"
254+
```
249255

250-
- Add or Remove an exclusion for a folder:
256+
#### Example 3: Add or remove a folder exclusion
251257

252-
```bash
253-
mdatp exclusion folder add --path /var/log/ --scope epp
254-
```
258+
You can add or remove an exclusion for a folder.
255259

256-
```console
257-
Folder exclusion configured successfully
258-
```
260+
```bash
261+
mdatp exclusion folder add --path /var/log/ --scope epp
262+
```
263+
264+
```console
265+
Folder exclusion configured successfully
266+
```
259267

260-
```bash
261-
mdatp exclusion folder remove --path /var/log/ --scope epp
262-
```
268+
```bash
269+
mdatp exclusion folder remove --path /var/log/ --scope epp
270+
```
263271

264-
```console
265-
Folder exclusion removed successfully
266-
```
272+
```console
273+
Folder exclusion removed successfully
274+
```
267275

268-
```bash
269-
mdatp exclusion folder add --path /var/log/ --scope global
270-
```
276+
```bash
277+
mdatp exclusion folder add --path /var/log/ --scope global
278+
```
271279

272-
```console
273-
Folder exclusion configured successfully
274-
```
280+
```console
281+
Folder exclusion configured successfully
282+
```
275283

276-
```bash
277-
mdatp exclusion folder remove --path /var/log/ --scope global
278-
```
284+
```bash
285+
mdatp exclusion folder remove --path /var/log/ --scope global
286+
```
279287

280-
```console
281-
Folder exclusion removed successfully
282-
```
288+
```console
289+
Folder exclusion removed successfully
290+
```
283291

284292
- Add an exclusion for a second folder:
285293

0 commit comments

Comments
 (0)