Set-VBRMalwareDetectionExclusion

Short Description

Modifies settings of machines added to malware exclusions.

Applies to

Product Edition: Standard, Enterprise, Enterprise Plus, Veeam Universal License

Syntax

Set-VBRMalwareDetectionExclusion -Exclusion <VBRMalwareDetectionExclusion> [-Note <String>] [-ExcludeEntireObject <Boolean>] [-ExcludedPaths <String[]>] [-ExcludedActivities <VBRActivityType[]>] [-AutoScanDisabled <Boolean>] [<CommonParameters>]

Detailed Description

This cmdlet modifies settings of a machine added to malware exclusions. You can switch the exclusion to a full exclusion with the ExcludeEntireObject parameter, or change individual settings: the note, the list of excluded paths, the list of excluded activities, or the autoscan setting.

Note

To modify settings, specify new values for the necessary parameters. The cmdlet will overwrite the previous parameter values with new values. The parameters that you omit will remain unchanged.

Parameters

Parameters
Parameter	Description	Type	Required	Position	Accept Pipeline Input
Exclusion	Specifies an exclusion rule. The cmdlet will modify settings of this rule.	Accepts the VBRMalwareDetectionExclusion object. To get this object, run the Get-VBRMalwareDetectionExclusion cmdlet.	True	Named	True (ByPropertyName, ByValue)
AutoScanDisabled	Defines whether Veeam Backup & Replication will run autoscan for the machine: $True: autoscan will be disabled for the machine. Set this value when autoscan is not applicable to the machine, for example, for machines with disks encrypted by software such as BitLocker, VeraCrypt, or LUKS, or for Linux machines in an environment that has no Linux Mount Server. $False: autoscan will run for the machine.	Boolean	False	Named	False
ExcludedActivities	Specifies an array of malware detection activities that Veeam Backup & Replication will skip for the machine. The following activity values are supported: DeletedUsefulFiles: skip detection of deleted files. RansomwareNotes: skip detection of ransomware notes. RansomwareExtensions: skip detection of suspicious file extensions. EncryptedData: skip detection of encrypted files. RenamedFiles: skip detection of bulk file rename activity. SuspiciousFilesInDelta: skip detection of indicators of compromise. Note: The YaraScan and AntivirusScan values are part of the VBRActivityType enumeration but cannot be used with this parameter. Duplicate values in the array are removed before saving.	VBRActivityType[]	False	Named	False
ExcludedPaths	Specifies an array of file or folder paths that Veeam Backup & Replication will skip from file system activity analysis for the machine. Each path must be one of the following: An absolute Windows path that starts with a drive letter (for example, C:\Users\Veeam\Documents\Data.docx). An absolute Linux path that starts with / (for example, /var/log/). To exclude a folder, add a trailing slash to the path. Veeam Backup & Replication removes surrounding double quotes and duplicate entries from the array before saving.	String[]	False	Named	False
ExcludeEntireObject	Defines that the machine will be skipped by all file system activity analysis and inline entropy analysis malware detection mechanisms. To switch the exclusion back to a partial exclusion, set the parameter value to $False and use the ExcludedActivities, ExcludedPaths, or AutoScanDisabled parameters to define the new scope.	Boolean	False	Named	False
Note	Specifies a note for a machine. Maximum length: 255 characters.	String	False	Named	False

This cmdlet supports Microsoft PowerShell common parameters. For more information on common parameters, see Microsoft Docs.

Output Object

VBRMalwareDetectionExclusion

Examples

Example 1. Modifying Note for Machine Added to Malware Exclusions

This example shows how to modify the note for a machine added to malware exclusions.

$excludedvm = Get-VBRMalwareDetectionExclusion

Set-VBRMalwareDetectionExclusion -Exclusion $excludedvm[3] -Note "Excluded for compliance reasons"

Perform the following steps:

Run the Get-VBRMalwareDetectionExclusion cmdlet. Save the result to the $excludedvm variable.

The Get-VBRMalwareDetectionExclusion cmdlet will return an array of machines. Mind the ordinal number of the necessary machine (in our example, it is the fourth machine in the array).

Run the Set-VBRMalwareDetectionExclusion cmdlet. Set the $excludedvm[3] variable as the Exclusion parameter value. Specify the Note parameter value.

Example 2. Disabling Autoscan for Excluded Machine

This example shows how to disable autoscan for an existing exclusion identified by ID.

$exclusion = Get-VBRMalwareDetectionExclusion -Id "9cf08cc6-9fb4-46ab-a254-b14c8381343e"

Set-VBRMalwareDetectionExclusion -Exclusion $exclusion -AutoScanDisabled:$True

Perform the following steps:

Run the Get-VBRMalwareDetectionExclusion cmdlet. Specify the Id parameter value. Save the result to the $exclusion variable.
Run the Set-VBRMalwareDetectionExclusion cmdlet. Set the $exclusion variable as the Exclusion parameter value. Set the $True value as the AutoScanDisabled parameter value.

Related Commands

Get-VBRMalwareDetectionExclusion