Skip to content

Commit d2dfb4f

Browse files
committed
Learn Editor: Update automated-response-exclusions.md
1 parent 2afb23d commit d2dfb4f

File tree

5 files changed

+17
-11
lines changed

5 files changed

+17
-11
lines changed

ATPDocs/automated-response-exclusions.md

Lines changed: 17 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -18,27 +18,33 @@ For example, an incident involving Attack Disruption, where response actions are
1818

1919
## How to add automated response exclusions
2020

21-
1. In [Microsoft Defender XDR](https://security.microsoft.com/), go to **Settings** and then **Identities**.
2221

23-
![Go to Settings, then Identities.](media/settings-identities.png)
22+
1. In the [Microsoft Defender XDR](https://security.microsoft.com/) portal, go to **Settings** and then **Microsoft Defender XDR**.
2423

25-
1. You'll then see **Automated response exclusions** in the left-hand menu.
2624

27-
![Automated response exclusions.](media/automated-response-exclusions.png)
25+
:::image type="content" source="media/automated-response-exclusions/screenshot-xdr-settings1.png" alt-text="Go to Settings, then Microsoft Defender XDR.":::
26+
2827

29-
1. To exclude specific users, select **Exclude Users**.
28+
1. You'll see **Automated response > Identities** in the left-side menu.
3029

31-
:::image type="content" source="media/exclude-users.png" alt-text="Exclude specific users.":::
30+
:::image type="content" source="media/automated-response-exclusions/screenshot-xdr-automated-response.png" alt-text="Go to Automated response then Identities.":::
3231

33-
1. Search for the users to exclude and select the **Exclude Users** button.
32+
33+
1. To exclude specific users, select **Add User Exclusion**.
3434

35-
:::image type="content" source="media/exclude-specific-users.png" alt-text="Choose which users to exclude.":::
35+
:::image type="content" source="media/automated-response-exclusions/screenshot-xdr-add-exclusion.png" alt-text="Exclude specific users.":::
36+
37+
38+
1. Search for the users to exclude and select the **Exclude Users** button.
3639

40+
:::image type="content" source="media/exclude-specific-users.png" alt-text="Choose which users to exclude.":::
41+
3742
1. To remove excluded users, select the relevant users from the list and select the **Remove** button.
3843

39-
:::image type="content" source="media/remove-excluded-users.png" alt-text="Remove excluded users.":::
40-
44+
:::image type="content" source="media/remove-excluded-users.png" alt-text="Remove excluded users.":::
45+
4146
## See also
4247

4348
- [Configure event collection](deploy/configure-event-collection.md)
44-
- [Check out the Defender for Identity forum!](<https://aka.ms/MDIcommunity>)
49+
- [Check out the Defender for Identity forum!](https://aka.ms/MDIcommunity)
50+
12.6 KB
Loading
81.1 KB
Loading
53.7 KB
Loading
84 KB
Loading

0 commit comments

Comments
 (0)