diff --git a/defender-xdr/playbook-responding-ransomware-m365-defender.md b/defender-xdr/playbook-responding-ransomware-m365-defender.md
index e187d1ae20..2ce79d110d 100644
--- a/defender-xdr/playbook-responding-ransomware-m365-defender.md
+++ b/defender-xdr/playbook-responding-ransomware-m365-defender.md
@@ -14,6 +14,7 @@ ms.localizationpriority:   medium
 ms.collection: 
   - msftsolution-secops
   - tier1
+ms.custom:                 cx-rw
 f1.keywords:               NOCSH
 ---
 # Responding to ransomware attacks