From b1c0e9325b0caa9ec2d6069457ddeffd743da805 Mon Sep 17 00:00:00 2001 From: Prem Kumar <85905240+PremMS-MDE@users.noreply.github.com> Date: Mon, 20 Jan 2025 19:06:46 +0530 Subject: [PATCH 1/2] Update live-response-command-examples.md We have a known issue for Remediate Registry. As of now we do not support HKEY_USERS reg hive for Remediate LR Command --- defender-endpoint/live-response-command-examples.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/defender-endpoint/live-response-command-examples.md b/defender-endpoint/live-response-command-examples.md index 46974bc4c8..d8b192ca78 100644 --- a/defender-endpoint/live-response-command-examples.md +++ b/defender-endpoint/live-response-command-examples.md @@ -198,7 +198,7 @@ remediate process 7960 # See list of all remediated entities remediate list ``` - +Note: As of now we do not support HKEY_USERS reg hive for Remediate. This is a known issue and we are working on to support HKEY_USERS reg hive. ## `run` ```console From 49ea626a58821dfb4553c982f1dc89e6493538fc Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 24 Jan 2025 10:55:34 -0800 Subject: [PATCH 2/2] Update date and note format in documentation --- defender-endpoint/live-response-command-examples.md | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/defender-endpoint/live-response-command-examples.md b/defender-endpoint/live-response-command-examples.md index d8b192ca78..a66935a80d 100644 --- a/defender-endpoint/live-response-command-examples.md +++ b/defender-endpoint/live-response-command-examples.md @@ -14,7 +14,7 @@ ms.collection: ms.topic: conceptual ms.subservice: edr search.appverid: met150 -ms.date: 04/03/2024 +ms.date: 01/24/2025 --- # Live response command examples @@ -198,7 +198,10 @@ remediate process 7960 # See list of all remediated entities remediate list ``` -Note: As of now we do not support HKEY_USERS reg hive for Remediate. This is a known issue and we are working on to support HKEY_USERS reg hive. + +> [!NOTE] +> Currently, `HKEY_USERS` reg hive is not supported for `remediate`. This is a known issue, and we're looking into it. + ## `run` ```console