Please check the URL.
/docs/solutions/security/configure-elastic-defend/configure-self-healing-rollback-for-windows-endpoints