# Defend exclusion by parent signature?

**URL:** <https://discuss.elastic.co/t/defend-exclusion-by-parent-signature/365075>\
**Category:** Endpoint Security\
**Created:** [August 18, 2024, 4:26am UTC](https://discuss.elastic.co/t/defend-exclusion-by-parent-signature/365075 "2024-08-18T04:26:52Z")\
**Posts on this page:** 1\
**Showing post:** 5

<div class="post-metadata">

**Author:** ![gabriel.landau](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gabriel.landau/32/73401_2.png) [@gabriel.landau](https://discuss.elastic.co/u/gabriel.landau)\
**Post date:** [August 19, 2024, 7:19pm UTC](https://discuss.elastic.co/t/defend-exclusion-by-parent-signature/365075/5 "2024-08-19T19:19:53Z")

</div>

[Rule exceptions](https://www.elastic.co/guide/en/security/current/add-exceptions.html#detection-rule-exceptions) are as you describe. [Endpoint Exceptions](https://www.elastic.co/guide/en/security/current/add-exceptions.html#endpoint-rule-exceptions) are processed on-Endpoint before potentially generating any alerts or blocking behavior.

Related [discussion](https://discuss.elastic.co/t/elastic-security-rule-exceptions-vs-endpoint-exceptions/355404/2).

---

_[View the full topic](https://discuss.elastic.co/t/defend-exclusion-by-parent-signature/365075)._