Edit

isolateDeviceAction resource type

Namespace: microsoft.graph.security

Represents a deviceAction that isolates a device returned by a detectionRule hunting query. The action uses the device ID column from the query output to identify the device to isolate.

Inherits from deviceAction.

Properties

Property Type Description
deviceIdColumn String Name of the hunting-query result column that contains the device ID for the targeted device. Inherited from deviceAction.
isolationType microsoft.graph.security.isolationType Type of isolation to apply to the device. The possible values are: full, selective, unknownFutureValue.

Relationships

None.

JSON representation

The following JSON representation shows the resource type.

{
  "@odata.type": "#microsoft.graph.security.isolateDeviceAction",
  "deviceIdColumn": "String",
  "isolationType": "String"
}