Skip to content

Commit caa2fa1

Browse files
authored
Merge pull request #4392 from amirsc3/patch-6
Update respond-file-alerts.md
2 parents e306aef + e64e041 commit caa2fa1

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

defender-endpoint/respond-file-alerts.md

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -90,7 +90,8 @@ This action takes effect on devices with Windows 10, version 1703 or later, and
9090
- **Search box** - select **File** from the drop-down menu and enter the file name
9191

9292
> [!NOTE]
93-
> The stop and quarantine file action is limited to a maximum of 1000 devices. To stop a file on a larger number of devices, see [Add indicator to block or allow file](#add-indicator-to-block-or-allow-a-file).
93+
> The stop and quarantine file action is limited to a maximum of 1000 devices. To stop a file on a larger number of devices, see [Add indicator to block or allow file](#add-indicator-to-block-or-allow-a-file).<br>
94+
> The Stop and quarantine action has a maximum timeout period of 3 days. If the targeted device remains offline for longer than this period after the action is initiated, the action will not be delivered to that device.<br> To ensure the file remains blocked beyond the timeout or after the action completes, it's recommended to create an indicator to block the file explicitly.
9495
9596
2. Go to the top bar and select **Stop and Quarantine File**.
9697

0 commit comments

Comments
 (0)