From 9040c32125942e1ee4640f8799bec2ea2f5863bf Mon Sep 17 00:00:00 2001 From: Marty Hernandez Avedon Date: Tue, 9 Jul 2019 10:58:52 -0400 Subject: [PATCH] updated note to mention powershell --- .../live-response-command-examples.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/live-response-command-examples.md b/windows/security/threat-protection/microsoft-defender-atp/live-response-command-examples.md index dc71d8372c..89649bba47 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/live-response-command-examples.md +++ b/windows/security/threat-protection/microsoft-defender-atp/live-response-command-examples.md @@ -97,12 +97,16 @@ getfile c:\Users\user\Desktop\work.txt -auto >[!NOTE] > -> The following file types are **not** supported: +> The following file types **cannot** be downloaded using this command from within Live Response: > > * [Reparse point files](/windows/desktop/fileio/reparse-points/) > * [Sparse files](/windows/desktop/fileio/sparse-files/) > * Empty files > * Virtual files, or files that are not fully present locally +> +> These file types **are** supported by [PowerShell](/powershell/scripting/overview?view=powershell-6/). +> +> Use PowerShell as an alternative, if you have problems using this command from within Live Response. ## processes ```