From 34053af140ec96100b44f26220ea752e706fc84b Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Mon, 20 Apr 2020 10:36:44 -0700 Subject: [PATCH] add steps --- .../microsoft-defender-atp/manage-indicators.md | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-indicators.md b/windows/security/threat-protection/microsoft-defender-atp/manage-indicators.md index 354ce7015c..76908992e4 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-indicators.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-indicators.md @@ -163,6 +163,16 @@ You can also choose to upload a CSV file that defines the attributes of indicato Download the sample CSV to know the supported column attributes. +1. In the navigation pane, select **Settings** > **Indicators**. + +2. Select the tab of the entity type you'd like to import indicators for. + +3. Select **Import** > **Choose file**. + +4. Select **Import**. Do this for all the files you'd like to import. + +5. Select **Done**. + The following table shows the supported parameters. Parameter | Type | Description @@ -179,7 +189,6 @@ rbacGroupNames | String | Comma-separated list of RBAC group names the indicator - ## Related topic - [Create contextual IoC](respond-file-alerts.md#add-indicator-to-block-or-allow-a-file) - [Use the Microsoft Defender ATP indicators API](ti-indicator.md)