From e0af7e71b2ed20a4651b0f1cb7ba726d4c982699 Mon Sep 17 00:00:00 2001 From: Charles Ngor Date: Fri, 20 Sep 2024 09:02:16 +0200 Subject: [PATCH] Update rule description --- docs/xdr/features/collect/assets.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/xdr/features/collect/assets.md b/docs/xdr/features/collect/assets.md index cb20b39bf1..3127f71554 100644 --- a/docs/xdr/features/collect/assets.md +++ b/docs/xdr/features/collect/assets.md @@ -152,9 +152,9 @@ This rule enriches an existing asset with an `os` contextual property. This prop **Set the Contextual Property `edr_agent_id` to Host** -This rule enriches an existing asset with the `edr_agent_id` contextual property (for example `sentinelone_agent_id`). This property is extracted from the values of `agent.id` and `agent.type`. This rule only applies to assets of `Host` category. +This rule enriches an existing asset with the `edr_agent_id` contextual property (for example `sentinelone_agent_id`). This property is extracted from the values of `agent.id` and `agent.type`. -Note that a single host can have multiple EDR agent IDs. +Note that this rule only applies to assets of `Host` category and that a single host can have multiple EDR agent IDs. ### Discover unique Hosts