Skip to content

Commit c2a6c57

Browse files
committed
Update configure-contextual-file-folder-exclusions-microsoft-defender-antivirus.md
1 parent 4e23cfb commit c2a6c57

File tree

1 file changed

+5
-6
lines changed

1 file changed

+5
-6
lines changed

defender-endpoint/configure-contextual-file-folder-exclusions-microsoft-defender-antivirus.md

Lines changed: 5 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -46,8 +46,8 @@ Restrictions are typically applied by adding the restriction type to the file or
4646
|:---|:---|:---|
4747
| File/folder | `PathType` | `file` <br/> `folder` |
4848
| Scan type | `ScanType` | `quick` <br/> `full` |
49-
| Scan trigger | `ScanTrigger` | `OnDemand` <br/> `OnAccess` <br/> BM |
50-
| Process | `Process` | "<image_path>" |
49+
| Scan trigger | `ScanTrigger` | `OnDemand` <br/> `OnAccess` <br/> Behavior monitoring |
50+
| Process | `Process` | `<path>` |
5151

5252
### Requirements
5353

@@ -60,7 +60,7 @@ See [Microsoft Defender Antivirus security intelligence and product updates](mic
6060

6161
### Syntax
6262

63-
As a starting point, you may already have exclusions in place that you wish to make more specific. To form the exclusion string, first define the path to the file or folder to be excluded, then add the type name and associated value, as shown in the following example.
63+
As a starting point, you might already have exclusions in place that you wish to make more specific. To form the exclusion string, first define the path to the file or folder to be excluded, then add the type name and associated value, as shown in the following example.
6464

6565
`<PATH>\:{TypeName:value,TypeName:value}`
6666

@@ -69,7 +69,6 @@ Keep in mind that _all_ **types** and **values** are case sensitive.
6969
> [!NOTE]
7070
> Conditions inside `{}` MUST be true for the restriction to match. For example, if you specify two scan triggers this cannot be true, and the exclusion will not apply. To specify two restrictions of the same type, create two separate exclusions.
7171
72-
7372
### Examples
7473

7574
The following string excludes "c:\documents\design.doc" only if it's a file and only in on-access scans:
@@ -152,7 +151,6 @@ To exclude a file or folder and its contents from being scanned only when the fi
152151
This restriction allows you to define that an exclusion should only apply when a file or folder is being accessed by a specific process. A common scenario is when you want to avoid excluding the process as that avoidance would cause Defender Antivirus to ignore other operations by that process. Wildcards are supported in the process name/path.
153152

154153
> [!NOTE]
155-
>
156154
> Using a large amount of process exclusion restrictions on a machine can adversely affect performance. In addition, if an exclusion is restricted to a certain process or processes, other active processes (such as indexing, backup, updates) can still trigger file scans.
157155
158156
To exclude a file or folder only when accessed by a specific process, create a normal file or folder exclusion and add the process to restrict the exclusion to. For example:
@@ -163,5 +161,6 @@ To exclude a file or folder only when accessed by a specific process, create a n
163161

164162
After constructing your desired contextual exclusions, you can use your existing management tool to configure file and folder exclusions using the string you created.
165163

166-
See: [Configure and validate exclusions for Microsoft Defender Antivirus scans](configure-exclusions-microsoft-defender-antivirus.md)
164+
See [Configure and validate exclusions for Microsoft Defender Antivirus scans](configure-exclusions-microsoft-defender-antivirus.md).
165+
167166
[!INCLUDE [Microsoft Defender for Endpoint Tech Community](../includes/defender-mde-techcommunity.md)]

0 commit comments

Comments
 (0)