Skip to content

Commit e61e1d0

Browse files
committed
Update "Blocklist"
1 parent 5c95f45 commit e61e1d0

File tree

2 files changed

+6
-6
lines changed

2 files changed

+6
-6
lines changed

docs/management/admin/blocklist.asciidoc

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ The blocklist is not intended to broadly block benign applications for non-secur
1616

1717
By default, a blocklist entry is recognized globally across all hosts running {elastic-defend}. If you have a https://www.elastic.co/pricing[Platinum or Enterprise subscription], you can also assign a blocklist entry to specific {elastic-defend} integration policies, which blocks the process only on hosts assigned to that policy.
1818

19-
. Go to **Manage** -> **Blocklist**.
19+
. Find **Blocklist** in the main menu or use the {kibana-ref}/introduction.html#kibana-navigation-search[global search field].
2020

2121
. Click **Add blocklist entry**. The **Add blocklist** flyout appears.
2222

@@ -49,7 +49,7 @@ NOTE: You can also select the `Per Policy` option without immediately assigning
4949
. Click **Add blocklist**. The new entry is added to the **Blocklist** page.
5050

5151
. When you're done adding entries to the blocklist, ensure that the blocklist is enabled for the {elastic-defend} integration policies that you just assigned:
52-
.. Go to **Manage** -> **Policies**, then click on an integration policy.
52+
.. Go to the **Policies** page, then click on an integration policy.
5353
.. On the **Policy settings** tab, ensure that the **Malware protections** and **Blocklist** toggles are switched on. Both settings are enabled by default.
5454

5555
[discrete]

docs/serverless/edr-manage/blocklist.asciidoc

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@
55

66
preview:[]
77

8-
The blocklist (**Assets** → **Blocklist**) allows you to prevent specified applications from running on hosts, extending the list of processes that {elastic-defend} considers malicious. This helps ensure that known malicious processes aren't accidentally executed by end users.
8+
The blocklist allows you to prevent specified applications from running on hosts, extending the list of processes that {elastic-defend} considers malicious. This helps ensure that known malicious processes aren't accidentally executed by end users.
99

1010
The blocklist is not intended to broadly block benign applications for non-security reasons; only use it to block potentially harmful applications. To compare the blocklist with other endpoint artifacts, refer to <<security-optimize-edr>>.
1111

@@ -22,7 +22,7 @@ The blocklist is not intended to broadly block benign applications for non-secur
2222

2323
By default, a blocklist entry is recognized globally across all hosts running {elastic-defend}. You can also assign a blocklist entry to specific {elastic-defend} integration policies, which blocks the process only on hosts assigned to that policy.
2424

25-
. Go to **Assets** → **Blocklist**.
25+
. Find **Blocklist** in the main menu or use the global search field.
2626
. Click **Add blocklist entry**. The **Add blocklist** flyout appears.
2727
. Fill in these fields in the **Details** section:
2828
+
@@ -60,14 +60,14 @@ You can also select the `Per Policy` option without immediately assigning a poli
6060
. Click **Add blocklist**. The new entry is added to the **Blocklist** page.
6161
. When you're done adding entries to the blocklist, ensure that the blocklist is enabled for the {elastic-defend} integration policies that you just assigned:
6262
+
63-
.. Go to **Assets** → **Policies**, then click on an integration policy.
63+
.. Go to the **Policies** page, then click on an integration policy.
6464
.. On the **Policy settings** tab, ensure that the **Malware protections** and **Blocklist** toggles are switched on. Both settings are enabled by default.
6565

6666
[discrete]
6767
[[manage-blocklist]]
6868
== View and manage the blocklist
6969

70-
The **Blocklist** page (**Assets** → **Blocklist**) displays all the blocklist entries that have been added to the {security-app}. To refine the list, use the search bar to search by name, description, or field value.
70+
The **Blocklist** page displays all the blocklist entries that have been added to the {security-app}. To refine the list, use the search bar to search by name, description, or field value.
7171

7272
[role="screenshot"]
7373
image::images/blocklist/-management-admin-blocklist.png[]

0 commit comments

Comments
 (0)