From 1159f6c1f1b40bd74d8c09aa713b8f9ccdf81e88 Mon Sep 17 00:00:00 2001
From: Sarah Katz <167811564+Sarit1046@users.noreply.github.com>
Date: Thu, 10 Apr 2025 12:41:37 -0700
Subject: [PATCH] Update playbook-responding-ransomware-m365-defender.md

Added cx-rw tag to track ransomware metrics
---
 defender-xdr/playbook-responding-ransomware-m365-defender.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/defender-xdr/playbook-responding-ransomware-m365-defender.md b/defender-xdr/playbook-responding-ransomware-m365-defender.md
index e187d1ae20..2ce79d110d 100644
--- a/defender-xdr/playbook-responding-ransomware-m365-defender.md
+++ b/defender-xdr/playbook-responding-ransomware-m365-defender.md
@@ -14,6 +14,7 @@ ms.localizationpriority:   medium
 ms.collection: 
   - msftsolution-secops
   - tier1
+ms.custom:                 cx-rw
 f1.keywords:               NOCSH
 ---
 # Responding to ransomware attacks