Edit

accountSidAction resource type

Namespace: microsoft.graph.security

Represents an automatedAction that targets an account by security identifier (SID) from a detectionRule hunting query. The action uses the configured account SID column from the query output to identify the account.

Inherits from automatedAction.

Properties

Property Type Description
accountSidColumn String Name of the hunting-query result column that contains the SID of the targeted account.

Relationships

None.

JSON representation

The following JSON representation shows the resource type.

{
  "@odata.type": "#microsoft.graph.security.accountSidAction",
  "accountSidColumn": "String"
}