From 499eda8b26d547ec512fc9fd5273d6304593bcf1 Mon Sep 17 00:00:00 2001 From: Charles Ngor Date: Fri, 20 Sep 2024 15:47:59 +0200 Subject: [PATCH] Fix doc for discovery rule --- docs/xdr/features/collect/assets.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/xdr/features/collect/assets.md b/docs/xdr/features/collect/assets.md index 3127f71554..db79af39dd 100644 --- a/docs/xdr/features/collect/assets.md +++ b/docs/xdr/features/collect/assets.md @@ -152,7 +152,7 @@ This rule enriches an existing asset with an `os` contextual property. This prop **Set the Contextual Property `edr_agent_id` to Host** -This rule enriches an existing asset with the `edr_agent_id` contextual property (for example `sentinelone_agent_id`). This property is extracted from the values of `agent.id` and `agent.type`. +This rule enriches an existing asset with the `edr_agent_id` contextual property (for example `sentinelone_agent_id`). This property is extracted from the value of `agent.id`. Note that this rule only applies to assets of `Host` category and that a single host can have multiple EDR agent IDs.