Enabling and disabling custom rules

Enabling and disabling are available only for custom IOA rules. If you want to remove exclusions from Kaspersky IOA rule, set default values in the Use and Action fields of the rule.

To change the state of Kaspersky EDR Expert custom IOA rules:

1. In the main menu, go to MONITORING & REPORTING → CUSTOM RULES.
2. Go to Custom IOA rules tab.
3. Select the rule or rules that you want to delete.
4. Click the Enable or Disable button.

The status of a rule or multiple rules is changed.