Edit

deviceAction resource type

Namespace: microsoft.graph.security

Important

APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

Represents an automatedAction that targets a device returned by a detectionRule hunting query. The action uses a device ID column from the query output to identify the device.

Inherits from automatedAction.

Properties

Property Type Description
deviceIdColumn String Name of the hunting-query result column that contains the device ID for the targeted device.

Relationships

None.

JSON representation

The following JSON representation shows the resource type.

{
  "@odata.type": "#microsoft.graph.security.deviceAction",
  "deviceIdColumn": "String"
}