huntingSchemaBuiltInFunction resource type

Namespace: microsoft.graph.security

Important

APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

Represents a prebuilt function included with Microsoft Defender XDR advanced hunting. Built-in functions are available to all advanced hunting instances and can't be modified by users. Part of the huntingSchemaFunctions returned by the getHuntingSchema function.

Properties

Property	Type	Description
documentation	String	Description of the function and its usage.
huntingFunctionId	Int64	Unique identifier for the function. Required.
inputParameters	microsoft.graph.security.huntingSchemaFunctionParameter collection	Collection of input parameters accepted by the function.
name	String	Name of the function. Required.
outputColumns	microsoft.graph.security.huntingSchemaTableColumn collection	Collection of columns returned by the function.
path	String	Folder path of the function.

Relationships

None.

JSON representation

The following JSON representation shows the resource type.

{
  "documentation": "String",
  "huntingFunctionId": "Int64",
  "inputParameters": [{"@odata.type": "microsoft.graph.security.huntingSchemaFunctionParameter"}],
  "name": "String",
  "outputColumns": [{"@odata.type": "microsoft.graph.security.huntingSchemaTableColumn"}],
  "path": "String"
}