diff --git a/x-pack/plugins/security_solution/public/common/components/exceptions/exceptionable_endpoint_fields.json b/x-pack/plugins/security_solution/public/common/components/exceptions/exceptionable_endpoint_fields.json
index 5c483e83a5ae0..a4babfaaa538f 100644
--- a/x-pack/plugins/security_solution/public/common/components/exceptions/exceptionable_endpoint_fields.json
+++ b/x-pack/plugins/security_solution/public/common/components/exceptions/exceptionable_endpoint_fields.json
@@ -117,7 +117,15 @@
   "user.id",
   "Ransomware.feature",
   "Ransomware.files.data",
+  "Ransomware.files.entropy",
+  "Ransomware.files.extension",
+  "Ransomware.files.operation",
+  "Ransomware.files.path",
   "Ransomware.child_processes.files.data",
+  "Ransomware.child_processes.files.entropy",
+  "Ransomware.child_processes.files.extension",
+  "Ransomware.child_processes.files.operation",
+  "Ransomware.child_processes.files.path",
   "Memory_protection.feature",
   "Memory_protection.self_injection",
   "dll.path",