Skip to content

Commit c157dda

Browse files
authored
Merge pull request #1582 from AruneemaXD/main
[MDE Linux] Global Exclusions enabled till PROD for all orgs
2 parents 1c7a2a9 + f8761bc commit c157dda

File tree

2 files changed

+6
-6
lines changed

2 files changed

+6
-6
lines changed

defender-endpoint/linux-exclusions.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ ms.collection:
1515
ms.topic: conceptual
1616
ms.subservice: linux
1717
search.appverid: met150
18-
ms.date: 10/11/2024
18+
ms.date: 10/14/2024
1919
---
2020

2121
# Configure and validate exclusions for Microsoft Defender for Endpoint on Linux
@@ -32,7 +32,7 @@ ms.date: 10/11/2024
3232
This article provides information on how to define antivirus and global exclusions for Microsoft Defender for Endpoint. Antivirus exclusions apply to on-demand scans, real-time protection (RTP), and behavior monitoring (BM). Global exclusions apply to real-time protection (RTP), behavior monitoring (BM), and endpoint detection and response (EDR), thus stopping all the associated antivirus detections, EDR alerts, and visibility for the excluded item.
3333

3434
> [!IMPORTANT]
35-
> The antivirus exclusions described in this article apply to only antivirus capabilities and not endpoint detection and response (EDR). Files that you exclude using the antivirus exclusions described in this article can still trigger EDR alerts and other detections. Whereas the global exclusions described in this section apply to antivirus as well as endpoint detection and response capabilities thus stopping all associated AV protection, EDR alerts and detection. Global exclusions are available from Defender for Endpoint version `101.23092.0012` or later till Insider Slow Ring. For EDR exclusions, [contact support](/microsoft-365/admin/get-help-support).
35+
> The antivirus exclusions described in this article apply to only antivirus capabilities and not to endpoint detection and response (EDR). Files that you exclude using the antivirus exclusions described in this article can still trigger EDR alerts and other detections. Global exclusions described in this section apply to antivirus **and** endpoint detection and response capabilities, thus stopping all associated antivirus protection, EDR alerts, and detections. Global exclusions are currently in public preview, and are available in Defender for Endpoint version `101.23092.0012` or later, in the Insiders Slow and Production rings. For EDR exclusions, [contact support](/microsoft-365/admin/get-help-support).
3636
3737
You can exclude certain files, folders, processes, and process-opened files from Defender for Endpoint on Linux.
3838

defender-endpoint/linux-preferences.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ ms.service: defender-endpoint
66
ms.author: deniseb
77
author: denisebmsft
88
ms.localizationpriority: medium
9-
ms.date: 10/11/2024
9+
ms.date: 10/14/2024
1010
manager: deniseb
1111
audience: ITPro
1212
ms.collection:
@@ -220,7 +220,7 @@ Specifies the behavior of RTP on mount point marked as noexec. There are two val
220220

221221
- Unmuted (`unmute`): The default value, all mount points are scanned as part of RTP.
222222
- Muted (`mute`): Mount points marked as noexec aren't scanned as part of RTP, these mount point can be created for:
223-
- Database files on Database servers for keeping data base files.
223+
- Database files on Database servers for keeping database files.
224224
- File server can keep data files mountpoints with noexec option.
225225
- Backup can keep data files mountpoints with noexec option.
226226

@@ -384,9 +384,9 @@ Specify the maximum number of entries to keep in the scan history. Entries inclu
384384
**Exlusion setting preferences are currently in preview**.
385385

386386
> [!NOTE]
387-
> Available in Defender for Endpoint version `101.23092.0012` or later till Insider Slow Ring.
387+
> Global exclusions are currently in public preview, and are available in Defender for Endpoint beginning with version `101.23092.0012` or later in the Insiders Slow and Production rings.
388388
389-
The *exclusionSettings* section of the configuration profile is used to configure various exclusions for Microsoft Defender for Endpoint for Linux.
389+
The `exclusionSettings` section of the configuration profile is used to configure various exclusions for Microsoft Defender for Endpoint for Linux.
390390

391391
|Description|JSON Value|
392392
|---|---|

0 commit comments

Comments
 (0)