HOTSPOT
-
You have a Microsoft 365 E5 subscription that uses Microsoft Defender XDR.
You are implementing a deception rule.
You need to provide a custom lure file.
For the custom lure, you set Planting path to HOME.
Which types of files can you use for the custom lure, and in which home directory should the file be located on a device? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
This should be the 'active user' as stated in the settings when using it: security.microsoft.com system > settings > endpoints > general > advanced features > deception From there you see --> System > settings > endpoints > Rules > Deception rules + Add deception rule --> Use custom lures only --> "You can use {HOME} as the active user's home folder, which must be at the beginning if used, or a regula Windows path. Network paths are not supported.
Looks that you are correct, and only documents, config files and link files can be added: https://learn.microsoft.com/en-us/defender-xdr/configure-deception
https://learn.microsoft.com/en-us/defender-xdr/configure-deception 1. XLSX and PDF only: “Custom lures can be any file type (except .DLL and .EXE files) and are limited to 10 MB each.“ 2. The active user: “You can use {HOME} as the active user’s home folder...”