From 15e437bab94c6a3d0b26244eb0d136ad542cc18e Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 12 Mar 2020 16:44:06 -0700 Subject: [PATCH] Update configure-extension-file-exclusions-windows-defender-antivirus.md --- ...e-exclusions-windows-defender-antivirus.md | 54 ++----------------- 1 file changed, 5 insertions(+), 49 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-antivirus/configure-extension-file-exclusions-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/configure-extension-file-exclusions-windows-defender-antivirus.md index 8135fb28a9..a0c707ea60 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/configure-extension-file-exclusions-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/configure-extension-file-exclusions-windows-defender-antivirus.md @@ -186,60 +186,16 @@ The following table describes how the wildcards can be used and provides some ex |Wildcard |Examples | |---------|---------| |`*` (asterisk)

In **file name and file extension inclusions**, the asterisk replaces any number of characters, and only applies to files in the last folder defined in the argument.

In **folder exclusions**, the asterisk replaces a single folder. Use multiple `*` with folder slashes `\` to indicate multiple, nested folders. After matching the number of wild carded and named folders, all subfolders are also included. | `C:\MyData\*.txt` would include `C:\MyData\notes.txt`

`C:\somepath\*\Data` would include any file in `C:\somepath\Archives\Data and its subfolders` and `C:\somepath\Authorized\Data and its subfolders`

`C:\Serv\*\*\Backup` would include any file in `C:\Serv\Primary\Denied\Backup and its subfolders` and `C:\Serv\Secondary\Allowed\Backup and its subfolders` | -|`?` (question mark) | | -|Row3 | | -|Row4 | | -|Row5 | | - - - ? (question mark) - - - Replaces a single character.
- Only applies to files in the last folder defined in the argument. - - - Replaces a single character in a folder name.
- After matching the number of wild carded and named folders, all subfolders will also be included. - - -
    -
  1. C:\MyData\my?.zip
    2. -
  2. C:\somepath\?\Data
    3. -
  3. C:\somepath\test0?\Data
    4. -
- - -
    -
  1. C:\MyData\my1.zip
    2. -
  2. Any file in C:\somepath\P\Data and its subfolders
    3. -
  3. Any file in C:\somepath\test01\Data and its subfolders
    4. -
- - - - Environment variables - The defined variable will be populated as a path when the exclusion is evaluated. - Same as file and extension use. - -
    -
  1. %ALLUSERSPROFILE%\CustomLogFiles
    2. -
- - -
    -
  1. C:\ProgramData\CustomLogFiles\Folder1\file1.txt
    2. -
- - - +|`?` (question mark)

In **file name and file extension inclusions**, the question mark replaces a single character, and only applies to files in the last folder defined in the argument.

In **folder exclusions**, the question mark replaces a single character in a folder name. After matching the number of wild carded and named folders, all subfolders are also included. |`C:\MyData\my` would include `C:\MyData\my1.zip`

`C:\somepath\?\Data` would include any file in `C:\somepath\P\Data` and its subfolders

`C:\somepath\test0?\Data` would include any file in `C:\somepath\test01\Data` and its subfolders | +|Environment variables

The defined variable is populated as a path when the exclusion is evaluated. |`%ALLUSERSPROFILE%\CustomLogFiles` would include `C:\ProgramData\CustomLogFiles\Folder1\file1.txt` | + >[!IMPORTANT] >If you mix a file exclusion argument with a folder exclusion argument, the rules will stop at the file argument match in the matched folder, and will not look for file matches in any subfolders. > ->For example, you can exclude all files that start with "date" in the folders `c:\data\final\marked` and `c:\data\review\marked` by using the rule argument c:\data\\\*\marked\date*.\*. +>For example, you can exclude all files that start with "date" in the folders `c:\data\final\marked` and `c:\data\review\marked` by using the rule argument `c:\data\*\marked\date*`. > ->This argument, however, will not match any files in **subfolders** under `c:\data\final\marked` or `c:\data\review\marked`. +>This argument, however, will not match any files in subfolders under `c:\data\final\marked` or `c:\data\review\marked`.