From ac81f733cd86c836ce6f0d68e01e537386e4bc13 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 6 May 2020 11:50:14 -0700 Subject: [PATCH] Update manage-indicators.md --- .../microsoft-defender-atp/manage-indicators.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-indicators.md b/windows/security/threat-protection/microsoft-defender-atp/manage-indicators.md index b2176faf1d..9f02877b9e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-indicators.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-indicators.md @@ -82,7 +82,7 @@ It's important to understand the following prerequisites prior to creating indic >[!NOTE] ->There may be a couple of minutes of latency between the time the action is taken and the actual file being blocked. +>There may be up to 2 hours of latency (usually less) between the time the action is taken and the actual file being blocked. ### Create an indicator for files from the settings page @@ -131,7 +131,7 @@ It's important to understand the following prerequisites prior to creating indic >- Full URL path blocks can be applied on the domain level and all unencrypted URLs >[!NOTE] ->There may be up to 2 hours latency (usually less) between the time the action is taken, and the URL and IP being blocked. +>There may be up to 2 hours of latency (usually less) between the time the action is taken, and the URL and IP being blocked. ### Create an indicator for IPs, URLs, or domains from the settings page