search cancel

You cannot search for some group wshen trying to add Endpoint Activity Recorder Exceptions on ATP 3.2 or SEDR 4.0

book

Article ID: 174016

calendar_today

Updated On:

Products

Endpoint Detection and Response

Issue/Introduction

When configuring the Endpoint Activity Recorder, you may need to add SEPM Group Exceptions to prevent some Endpoints from recording these events. If you type in the name of the SEPM group into the Exceptions list, some groups do not show up.

Cause

If the SEPM group name has special characters, it was not searchable. Special characters handled are: (, ), [, ], +, ~, { and }.

Resolution

This has been resolved in SEDR 4.1. Please update to this version if you use special characters in the SEPM group names.