Files
windows-itpro-docs/windows/security/threat-protection/microsoft-defender-atp/manage-automation-folder-exclusions.md
Daniel Simpson ec62c016c4 Merge pull request #4953 from LaurenMoynihan/patch-2
the first link under "related topics"
2019-09-27 14:30:56 -07:00

2.6 KiB

title, description, keywords, search.product, search.appverid, ms.prod, ms.mktglfcycl, ms.sitesec, ms.pagetype, ms.author, author, ms.localizationpriority, manager, audience, ms.collection, ms.topic
title description keywords search.product search.appverid ms.prod ms.mktglfcycl ms.sitesec ms.pagetype ms.author author ms.localizationpriority manager audience ms.collection ms.topic
Manage automation folder exclusions Add automation folder exclusions to control the files that are excluded from an automated investigation. manage, automation, exclusion, whitelist, blacklist, block, clean, malicious eADQiWindows 10XVcnh met150 w10 deploy library security macapara mjcaparas medium dansimp ITPro M365-security-compliance article

Manage automation folder exclusions

Applies to:

Want to experience Microsoft Defender ATP? Sign up for a free trial.

Automation folder exclusions allow you to specify folders that the Automated investigation will skip.

You can control the following attributes about the folder that you'd like to be skipped:

  • Folders
  • Extensions of the files
  • File names

Folders
You can specify a folder and its subfolders to be skipped.

Note

At this time, use of wild cards as a way to exclude files under a directory is not yet supported.

Extensions
You can specify the extensions to exclude in a specific directory. The extensions are a way to prevent an attacker from using an excluded folder to hide an exploit. The extensions explicitly define which files to ignore.

File names
You can specify the file names that you want to be excluded in a specific directory. The names are a way to prevent an attacker from using an excluded folder to hide an exploit. The names explicitly define which files to ignore.

Add an automation folder exclusion

  1. In the navigation pane, select Settings > Automation folder exclusions.

  2. Click New folder exclusion.

  3. Enter the folder details:

    • Folder
    • Extensions
    • File names
    • Description
  4. Click Save.

Edit an automation folder exclusion

  1. In the navigation pane, select Settings > Automation folder exclusions.

  2. Click Edit on the folder exclusion.

  3. Update the details of the rule and click Save.

Remove an automation folder exclusion

  1. In the navigation pane, select Settings > Automation folder exclusions.
  2. Click Remove exclusion.