|Category||Microsoft Docs article||Related commit history on GitHub||Change details|
Turn on this feature to take advantage of the automated investigation and remedi## Live response > [!NOTE]
-> Live response requires **Automated investigation** to be turned on before you can enable it in the advanced settings section in the Microsoft for Endpoint portal.
+> Live response requires **Automated investigation** to be turned on before you can enable it in the advanced settings section in the Microsoft Defender for Endpoint portal.Turn on this feature so that users with the appropriate permissions can start a live response session on devices.
|security||Configure Extension File Exclusions Microsoft Defender Antivirus||https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/security/defender-endpoint/configure-extension-file-exclusions-microsoft-defender-antivirus.md||
You can use the asterisk `*`, question mark `?`, or environment variables (such> There are key limitations and usage scenarios for these wildcards: > > - Environment variable usage is limited to machine variables and those applicable to processes running as an NT AUTHORITY\SYSTEM account.
+> - You can only use a maximum of six wildcards per entry.> - You cannot use a wildcard in place of a drive letter. > - An asterisk `*` in a folder exclusion stands in place for a single folder. Use multiple instances of `\*\` to indicate multiple nested folders with unspecified names. > - Currently, Microsoft Endpoint Configuration Manager does not support wildcard characters (such as `*` or `?`).