Skip to content

Commit d86bd31

Browse files
authored
Merge pull request #1260 from j0shbregman/docs-editor/indicator-file-1725049782
Update indicator-file.md
2 parents 8f2a1b8 + a6f50f6 commit d86bd31

File tree

1 file changed

+7
-2
lines changed

1 file changed

+7
-2
lines changed

defender-endpoint/indicator-file.md

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ ms.service: defender-endpoint
66
ms.author: siosulli
77
author: siosulli
88
ms.localizationpriority: medium
9-
ms.date: 08/26/2024
9+
ms.date: 09/03/2024
1010
manager: deniseb
1111
audience: ITPro
1212
ms.collection:
@@ -63,7 +63,12 @@ Understand the following prerequisites before you create indicators for files:
6363

6464
- To start blocking files, [turn on the "block or allow" feature](advanced-features.md) in Settings (in the [Microsoft Defender portal](https://security.microsoft.com), go to **Settings** > **Endpoints** > **General** > **Advanced features** > **Allow or block file**).
6565

66-
This feature is designed to prevent suspected malware (or potentially malicious files) from being downloaded from the web. It currently supports portable executable (PE) files, including `.exe` and `.dll` files. Coverage is extended over time.
66+
This feature is designed to prevent suspected malware (or potentially malicious files) from being downloaded from the web.
67+
68+
> [!NOTE]
69+
> File indicators support portable executable (PE) files, including `.exe` and `.dll` files only.
70+
71+
6772

6873
> [!IMPORTANT]
6974
> In Defender for Endpoint Plan 1 and Defender for Business, you can create an indicator to block or allow a file. In Defender for Business, your indicator is applied across your environment and cannot be scoped to specific devices.

0 commit comments

Comments
 (0)