From 8743418905bd3c2d4de6184b41f7fd59a0741ba7 Mon Sep 17 00:00:00 2001
From: Thomas Youngs <58738491+tyoungs-estc@users.noreply.github.com>
Date: Wed, 13 Nov 2024 16:42:46 -0500
Subject: [PATCH] Update allowlist-endpoint-3rd-party-av.asciidoc (#6085)

the driver and ELAM paths were inverted

Co-authored-by: Janeen Mikell Roberts <57149392+jmikell821@users.noreply.github.com>
(cherry picked from commit 90831ad82b07cc925da5f47c9dd54114d6d6bf93)
---
 .../admin/allowlist-endpoint-3rd-party-av.asciidoc          | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/docs/management/admin/allowlist-endpoint-3rd-party-av.asciidoc b/docs/management/admin/allowlist-endpoint-3rd-party-av.asciidoc
index e4dd3f47a1..383620e569 100644
--- a/docs/management/admin/allowlist-endpoint-3rd-party-av.asciidoc
+++ b/docs/management/admin/allowlist-endpoint-3rd-party-av.asciidoc
@@ -13,8 +13,8 @@ NOTE: Your AV software may refer to allowlisted processes as process exclusions,
 
 File paths:
 
-* ELAM driver: `c:\Windows\system32\drivers\elastic-endpoint-driver.sys`
-* Driver: `c:\Windows\system32\drivers\ElasticElam.sys`
+* ELAM driver: `c:\Windows\system32\drivers\ElasticElam.sys`
+* Driver: `c:\Windows\system32\drivers\elastic-endpoint-driver.sys`
 * Executable: `c:\Program Files\Elastic\Endpoint\elastic-endpoint.exe`
 +
 NOTE: The executable runs as `elastic-endpoint.exe`.
@@ -53,4 +53,4 @@ File path:
 
 * Executable: `/opt/Elastic/Endpoint/elastic-endpoint`
 +
-NOTE: The executable runs as `elastic-endpoint`.
\ No newline at end of file
+NOTE: The executable runs as `elastic-endpoint`.