Edit

fileAction resource type

Namespace: microsoft.graph.security

Represents an automatedAction that targets files returned by a detectionRule hunting query. The action uses file hash columns from the query output to identify the files.

Inherits from automatedAction.

Properties

Property Type Description
deviceGroupNames String collection Names of the device groups where the file action applies.
sha1Column String Name of the hunting-query result column that contains the SHA-1 hash of the targeted file.
sha256Column String Name of the hunting-query result column that contains the SHA-256 hash of the targeted file.

Relationships

None.

JSON representation

The following JSON representation shows the resource type.

{
  "@odata.type": "#microsoft.graph.security.fileAction",
  "deviceGroupNames": [
    "String"
  ],
  "sha1Column": "String",
  "sha256Column": "String"
}