Kaspersky Endpoint Detection and Response Expert

Deleting exclusions

You can delete a single exclusion, multiple exclusions, or all exclusions at once.

To delete an exclusion:

1. In the main menu, go to MONITORING & REPORTING → CUSTOM RULES.
2. In the Custom rule section that opens, go to the Exclusions from Kaspersky rules tab.
3. Select an exclusion or exclusions that you want to delete.
4. Click the Delete button.

   The action confirmation window opens.

5. Click Yes to confirm the deletion.

The exclusion is deleted.The Kaspersky IOA rule will be used for scanning events, without the exclusion. Values in the Action and Use fields of the Kaspersky rule will return to default.