From 92161d89ce28d64ac684724cb901557850b55502 Mon Sep 17 00:00:00 2001
From: Kevin Logan <56395104+kevinlog@users.noreply.github.com>
Date: Tue, 12 Apr 2022 10:53:42 -0700
Subject: [PATCH] [Security Solution] More Ransomware exceptionable fields
 (#130039)

(cherry picked from commit e0932c63e29e0a3163826bdfe0362770bd5020e9)
---
 .../exceptions/exceptionable_endpoint_fields.json         | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/x-pack/plugins/security_solution/public/common/components/exceptions/exceptionable_endpoint_fields.json b/x-pack/plugins/security_solution/public/common/components/exceptions/exceptionable_endpoint_fields.json
index 5c483e83a5ae0..a4babfaaa538f 100644
--- a/x-pack/plugins/security_solution/public/common/components/exceptions/exceptionable_endpoint_fields.json
+++ b/x-pack/plugins/security_solution/public/common/components/exceptions/exceptionable_endpoint_fields.json
@@ -117,7 +117,15 @@
   "user.id",
   "Ransomware.feature",
   "Ransomware.files.data",
+  "Ransomware.files.entropy",
+  "Ransomware.files.extension",
+  "Ransomware.files.operation",
+  "Ransomware.files.path",
   "Ransomware.child_processes.files.data",
+  "Ransomware.child_processes.files.entropy",
+  "Ransomware.child_processes.files.extension",
+  "Ransomware.child_processes.files.operation",
+  "Ransomware.child_processes.files.path",
   "Memory_protection.feature",
   "Memory_protection.self_injection",
   "dll.path",