Skip to content

Commit c261cd2

Browse files
authored
Update linux-exclusions.md
1 parent bf450d6 commit c261cd2

File tree

1 file changed

+8
-1
lines changed

1 file changed

+8
-1
lines changed

defender-endpoint/linux-exclusions.md

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -55,6 +55,10 @@ Antivirus exclusions can be used to exclude trusted files and processes from rea
5555
| Antivirus Exclusion | Antivirus engine <br/>*(scope: epp)* | Excludes content from antivirus (AV) scans and on-demand scans.|
5656
| Global Exclusion | Antivirus and endpoint detections and response engine <br/>*(scope: global)* | Excludes events from real time protection and EDR visibility. Doesn't apply to on-demand scans by default. |
5757

58+
> [!IMPORTANT]
59+
> Global exclusions are not applied to network protection hence alerts generated by network protection will still be visible.
60+
> For excluding processes from network exclusion please use `mdatp network-protection exclusion`
61+
5862
## Supported exclusion types
5963

6064
The following table shows the exclusion types supported by Defender for Endpoint on Linux.
@@ -317,12 +321,15 @@ Examples:
317321

318322
```bash
319323
mdatp exclusion process add --name cat --scope epp
320-
mdatp exclusion process add --name dog --scope global
324+
mdatp exclusion process add --name /usr/bin/dog --scope global
321325
```
322326

323327
```console
324328
Process exclusion configured successfully
325329
```
330+
331+
> [!NOTE]
332+
> Use full path for process exclusion with `global` scope.
326333

327334
## Validate exclusions lists with the EICAR test file
328335

0 commit comments

Comments
 (0)