Edit

deviceAction resource type

Namespace: microsoft.graph.security

Represents an automatedAction that targets a device returned by a detectionRule hunting query. The action uses a device ID column from the query output to identify the device.

Inherits from automatedAction.

Properties

Property Type Description
deviceIdColumn String Name of the hunting-query result column that contains the device ID for the targeted device.

Relationships

None.

JSON representation

The following JSON representation shows the resource type.

{
  "@odata.type": "#microsoft.graph.security.deviceAction",
  "deviceIdColumn": "String"
}