管理自动化文件夹排除项Manage automation folder exclusions

适用于:Applies to:

想要体验适用于终结点的 Defender?Want to experience Defender for Endpoint? 注册免费试用版。Sign up for a free trial.

自动文件夹排除项允许你指定自动调查将跳过的文件夹。Automation folder exclusions allow you to specify folders that the Automated investigation will skip.

可以控制要跳过的文件夹的以下属性:You can control the following attributes about the folder that you'd like to be skipped:

  • FoldersFolders
  • 文件的扩展名Extensions of the files
  • 文件名File names

FoldersFolders
可以指定要跳过的文件夹及其子文件夹。You can specify a folder and its subfolders to be skipped.

备注

目前尚不支持使用通配符作为排除目录下的文件的方法。At this time, use of wild cards as a way to exclude files under a directory is not yet supported.

ExtensionsExtensions
可以指定要排除在特定目录中的扩展。You can specify the extensions to exclude in a specific directory. 扩展是阻止攻击者使用排除文件夹隐藏攻击的一种方法。The extensions are a way to prevent an attacker from using an excluded folder to hide an exploit. 扩展明确定义要忽略的文件。The extensions explicitly define which files to ignore.

文件名File names
可以指定要排除在特定目录中的文件名。You can specify the file names that you want to be excluded in a specific directory. 名称是阻止攻击者使用排除文件夹隐藏攻击的一种方法。The names are a way to prevent an attacker from using an excluded folder to hide an exploit. 名称明确定义要忽略的文件。The names explicitly define which files to ignore.

添加自动化文件夹排除Add an automation folder exclusion

  1. 在导航窗格中,选择"设置 > ""自动化文件夹排除"。In the navigation pane, select Settings > Automation folder exclusions.

  2. 单击 "新建文件夹排除"。Click New folder exclusion.

  3. 输入文件夹详细信息:Enter the folder details:

    • FolderFolder
    • 扩展Extensions
    • 文件名File names
    • 说明Description
  4. 单击“保存”。Click Save.

备注

用于收集或检查已排除文件的 Live Response 命令将失败,并出现错误:"已排除文件"。Live Response commands to collect or examine excluded files will fail with error: "File is excluded". 此外,自动调查将忽略排除的项目。In addition, automated investigations will ignore the excluded items.

编辑自动化文件夹排除Edit an automation folder exclusion

  1. 在导航窗格中,选择"设置 > ""自动化文件夹排除"。In the navigation pane, select Settings > Automation folder exclusions.

  2. 单击 文件夹 排除上的"编辑"。Click Edit on the folder exclusion.

  3. 更新规则的详细信息,然后单击保存。Update the details of the rule and click Save.

删除自动化文件夹排除Remove an automation folder exclusion

  1. 在导航窗格中,选择"设置 > ""自动化文件夹排除"。In the navigation pane, select Settings > Automation folder exclusions.
  2. 单击 "删除排除"。Click Remove exclusion.