deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-14 14:27:22 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Make Acrolinx happy

Browse Source
This commit is contained in:
Tudor Dobrila 2020-03-31 16:56:19 -07:00
parent 461859c61a
commit cdbc1b5899
4 changed files with 13 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
windows/security/threat-protection/microsoft-defender-atp/linux-exclusions.md
View File

@ -52,7 +52,7 @@ Process | A specific process (specified either by the full path or file name) an
For more information on how to configure exclusions from Puppet, Ansible, or another management console, see [Set preferences for Microsoft Defender ATP for Linux](linux-preferences.md). For more information on how to configure exclusions from Puppet, Ansible, or another management console, see [Set preferences for Microsoft Defender ATP for Linux](linux-preferences.md).
### From the command-line ### From the command line
Run the following command to see the available switches for managing exclusions: Run the following command to see the available switches for managing exclusions:
@ -94,7 +94,7 @@ Examples:
You can validate that your exclusion lists are working by using `curl` to download a test file. You can validate that your exclusion lists are working by using `curl` to download a test file.
In the following Bash snippet, replace *test.txt* with a file that conforms to your exclusion rules. For example, if you have excluded the *.testing extension*, replace *test.txt* with *test.testing*. If you are testing a path, ensure that you run the command within that path. In the following Bash snippet, replace `test.txt` with a file that conforms to your exclusion rules. For example, if you have excluded the `.testing` extension, replace `test.txt` with `test.testing`. If you are testing a path, ensure that you run the command within that path.
```bash ```bash
$ curl -o test.txt https://www.eicar.org/download/eicar.com.txt $ curl -o test.txt https://www.eicar.org/download/eicar.com.txt

10
windows/security/threat-protection/microsoft-defender-atp/linux-support-connectivity.md
View File

@ -42,7 +42,7 @@ To test that a connection is not blocked in an environment without a proxy or wi
curl -w ' %{url_effective}\n' 'https://x.cp.wd.microsoft.com/api/report' 'https://cdn.x.cp.wd.microsoft.com/ping' curl -w ' %{url_effective}\n' 'https://x.cp.wd.microsoft.com/api/report' 'https://cdn.x.cp.wd.microsoft.com/ping'
``` ```
The output from this command should be similar to the following: The output from this command should be similar to:
``` ```
OK https://x.cp.wd.microsoft.com/api/report OK https://x.cp.wd.microsoft.com/api/report
@ -64,7 +64,7 @@ $ curl -x http://proxy_address:port -w ' %{url_effective}\n' 'https://x.cp.wd.mi
Ensure that you use the same proxy address and port as configured in the `/lib/system/system/mdatp.service` file. Check your proxy configuration if there are errors from the above commands. Ensure that you use the same proxy address and port as configured in the `/lib/system/system/mdatp.service` file. Check your proxy configuration if there are errors from the above commands.
To use a static proxy, the `mdatp.service` file must be modified. Ensure the leading leading `#` is removed to un-comment the following line from `/lib/systemd/system/mdatp.service`: To use a static proxy, the `mdatp.service` file must be modified. Ensure the leading `#` is removed to uncomment the following line from `/lib/systemd/system/mdatp.service`:
```bash ```bash
#Environment="HTTPS_PROXY=http://address:port" #Environment="HTTPS_PROXY=http://address:port"
@ -72,19 +72,19 @@ To use a static proxy, the `mdatp.service` file must be modified. Ensure the lea
Also ensure that the correct static proxy address is filled in to replace `address:port`. Also ensure that the correct static proxy address is filled in to replace `address:port`.
If this file is correct, try running the following command in the terminal to re-load Microsoft Defender ATP for Linux and propagate the setting: If this file is correct, try running the following command in the terminal to reload Microsoft Defender ATP for Linux and propagate the setting:
```bash ```bash
$ sudo systemctl daemon-reload; sudo systemctl restart mdatp $ sudo systemctl daemon-reload; sudo systemctl restart mdatp
``` ```
Upon success, attempt another connectivity test from the command-line: Upon success, attempt another connectivity test from the command line:
```bash ```bash
$ mdatp --connectivity-test $ mdatp --connectivity-test
``` ```
If the problem persists, reach out to customer support. If the problem persists, contact customer support.
## Resources ## Resources

10
windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md
View File

@ -33,7 +33,7 @@ The following steps can be used to troubleshoot and mitigate these issues:
1. Disable real-time protection using one of the following methods and observe whether the performance improves. This approach helps narrow down whether Microsoft Defender ATP for Linux is contributing to the performance issues. 1. Disable real-time protection using one of the following methods and observe whether the performance improves. This approach helps narrow down whether Microsoft Defender ATP for Linux is contributing to the performance issues.
If your device is not managed by your organization, real-time protection can be disabled from the command-line: If your device is not managed by your organization, real-time protection can be disabled from the command line:
```bash ```bash
$ mdatp --config realTimeProtectionEnabled false $ mdatp --config realTimeProtectionEnabled false
@ -41,7 +41,7 @@ The following steps can be used to troubleshoot and mitigate these issues:
If your device is managed by your organization, real-time protection can be disabled by your administrator using the instructions in [Set preferences for Microsoft Defender ATP for Linux](linux-preferences.md). If your device is managed by your organization, real-time protection can be disabled by your administrator using the instructions in [Set preferences for Microsoft Defender ATP for Linux](linux-preferences.md).
2. To find the applications that are triggering the most scans, you can use real time statistics gathered by Microsoft Defender ATP for Linux. This feature is enabled by default on the `Dogfood` and `InsisderFast` channels. If you're using a different update channel, this feature can be enabled from the command-line: 2. To find the applications that are triggering the most scans, you can use real time statistics gathered by Microsoft Defender ATP for Linux. This feature is enabled by default on the `Dogfood` and `InsisderFast` channels. If you're using a different update channel, this feature can be enabled from the command line:
```bash ```bash
$ mdatp config real_time_protection_statistics_enabled on $ mdatp config real_time_protection_statistics_enabled on
@ -65,12 +65,12 @@ To collect current statistics, run:
$ mdatp diagnostic real_time_protection_statistics # you can use ‘> stat.log’ to redirect to file $ mdatp diagnostic real_time_protection_statistics # you can use ‘> stat.log’ to redirect to file
``` ```
The output of this command will show all processes and their associated scan activity. To improve the performance of Microsoft Defender ATP for Linux, locate the one with the highest number under the `Total files scanned` row and add an exclusion for it. See [Configure and validate exclusions for Microsoft Defender ATP for Linux](linux-exclusions.md) for more information on how to add exclusions. The output of this command will show all processes and their associated scan activity. To improve the performance of Microsoft Defender ATP for Linux, locate the one with the highest number under the `Total files scanned` row and add an exclusion for it. For more information, see [Configure and validate exclusions for Microsoft Defender ATP for Linux](linux-exclusions.md).
[!NOTE] [!NOTE]
> The application stores statistics in memory and only keeps track of file activity since it was started and real time protection was enabled. Processes that were launched before or during periods when real time protection was off are not counted. Additionally, only events which triggered scans are counted. > The application stores statistics in memory and only keeps track of file activity since it was started and real-time protection was enabled. Processes that were launched before or during periods when real time protection was off are not counted. Additionally, only events which triggered scans are counted.
3. Use the `top` command-line tool and analyze which applications are using the resources on your system. Typical examples include software updaters and compilers. 3. Use the `top` command line tool and analyze which applications are using the resources on your system. Typical examples include software updaters and compilers.
4. Configure Microsoft Defender ATP for Linux with exclusions for the processes or disk locations that contribute to the performance issues and re-enable real-time protection. 4. Configure Microsoft Defender ATP for Linux with exclusions for the processes or disk locations that contribute to the performance issues and re-enable real-time protection.

2
windows/security/threat-protection/microsoft-defender-atp/mac-exclusions.md
View File

@ -64,7 +64,7 @@ Select the type of exclusion that you wish to add and follow the prompts.
You can validate that your exclusion lists are working by using `curl` to download a test file. You can validate that your exclusion lists are working by using `curl` to download a test file.
In the following Bash snippet, replace *test.txt* with a file that conforms to your exclusion rules. For example, if you have excluded the *.testing extension*, replace *test.txt* with *test.testing*. If you are testing a path, ensure that you run the command within that path. In the following Bash snippet, replace `test.txt` with a file that conforms to your exclusion rules. For example, if you have excluded the `.testing` extension, replace `test.txt` with `test.testing`. If you are testing a path, ensure that you run the command within that path.
```bash ```bash
$ curl -o test.txt https://www.eicar.org/download/eicar.com.txt $ curl -o test.txt https://www.eicar.org/download/eicar.com.txt