Skip to content

Commit

Permalink
Merge pull request #1260 from j0shbregman/docs-editor/indicator-file-…
Browse files Browse the repository at this point in the history
…1725049782

Update indicator-file.md
  • Loading branch information
denisebmsft authored Sep 3, 2024
2 parents 8f2a1b8 + a6f50f6 commit d86bd31
Showing 1 changed file with 7 additions and 2 deletions.
9 changes: 7 additions & 2 deletions defender-endpoint/indicator-file.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ ms.service: defender-endpoint
ms.author: siosulli
author: siosulli
ms.localizationpriority: medium
ms.date: 08/26/2024
ms.date: 09/03/2024
manager: deniseb
audience: ITPro
ms.collection:
Expand Down Expand Up @@ -63,7 +63,12 @@ Understand the following prerequisites before you create indicators for files:

- To start blocking files, [turn on the "block or allow" feature](advanced-features.md) in Settings (in the [Microsoft Defender portal](https://security.microsoft.com), go to **Settings** > **Endpoints** > **General** > **Advanced features** > **Allow or block file**).

This feature is designed to prevent suspected malware (or potentially malicious files) from being downloaded from the web. It currently supports portable executable (PE) files, including `.exe` and `.dll` files. Coverage is extended over time.
This feature is designed to prevent suspected malware (or potentially malicious files) from being downloaded from the web.

> [!NOTE]
> File indicators support portable executable (PE) files, including `.exe` and `.dll` files only.


> [!IMPORTANT]
> In Defender for Endpoint Plan 1 and Defender for Business, you can create an indicator to block or allow a file. In Defender for Business, your indicator is applied across your environment and cannot be scoped to specific devices.
Expand Down

0 comments on commit d86bd31

Please sign in to comment.