Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Namespace: microsoft.graph.security
Represents an automatedAction that stops and quarantines a file on a device returned by a detectionRule hunting query. The action uses device ID and SHA-1 columns from the query output to identify where to stop and quarantine the file.
Inherits from automatedAction.
Properties
| Property | Type | Description |
|---|---|---|
| deviceIdColumn | String | Name of the hunting-query result column that contains the device ID for the device where the file was observed. |
| sha1Column | String | Name of the hunting-query result column that contains the SHA-1 hash of the file to stop and quarantine. |
Relationships
None.
JSON representation
The following JSON representation shows the resource type.
{
"@odata.type": "#microsoft.graph.security.stopAndQuarantineFileAction",
"deviceIdColumn": "String",
"sha1Column": "String"
}