queryCondition resource type
Namespace: microsoft.graph.security
Important
APIs under the /beta
version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.
Represents the advanced hunting query that defines the behavior of a custom detection rule.
Properties
Property | Type | Description |
---|---|---|
lastModifiedDateTime | DateTimeOffset | Timestamp of when the query in the custom detection rule was last updated. |
queryText | String | Contents of the query. |
Relationships
None.
JSON representation
The following JSON representation shows the resource type.
{
"@odata.type": "#microsoft.graph.security.queryCondition",
"queryText": "String",
"lastModifiedDateTime": "String (timestamp)"
}