Skip to content

Clarify quarantined file handling in Elastic Defend docs #7037

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Aug 21, 2025

Conversation

natasha-moore-elastic
Copy link
Contributor

@natasha-moore-elastic natasha-moore-elastic commented Aug 20, 2025

Contributes to #5157 by clarifying that files quarantined by Elastic Defend are obfuscated with a rolling XOR and that the get-file action automatically reverses this to retrieve the original file.

9.x PR: elastic/docs-content#2619

Preview: Configure an integration policy for Elastic Defend > Manage quarantined files

Copy link

A documentation preview will be available soon.

Request a new doc build by commenting
  • Rebuild this PR: run docs-build
  • Rebuild this PR and all Elastic docs: run docs-build rebuild

run docs-build is much faster than run docs-build rebuild. A rebuild should only be needed in rare situations.

If your PR continues to fail for an unknown reason, the doc build pipeline may be broken. Elastic employees can check the pipeline status here.

natasha-moore-elastic added a commit that referenced this pull request Aug 21, 2025
(cherry picked from commit 15f1c11)

Co-authored-by: natasha-moore-elastic <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants