Machine resource type

Important

Some information in this article relates to a prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, with respect to the information provided here.

Properties

Property	Type	Description
id	String	machine identity.
computerDnsName	String	machine fully qualified name.
firstSeen	DateTimeOffset	First date and time where the machine was observed by Microsoft Defender for Endpoint.
lastSeen	DateTimeOffset	Time and date of the last received full device report. A device typically sends a full report every 24 hours. NOTE: This property doesn't correspond to the last seen value in the UI. It pertains to the last device update.
osPlatform	String	Operating system platform.
onboardingstatus	String	Status of machine onboarding. Possible values are: onboarded, CanBeOnboarded, Unsupported, and InsufficientInfo.
osProcessor	String	Operating system processor. Use osArchitecture property instead.
version	String	Operating system Version.
osBuild	Nullable long	Operating system build number.
lastIpAddress	String	Last IP on local NIC on the machine.
lastExternalIpAddress	String	Last IP through which the machine accessed the internet.
healthStatus	Enum	machine health status. Possible values are: Active, Inactive, ImpairedCommunication, NoSensorData, NoSensorDataImpairedCommunication, and Unknown.
rbacGroupName	String	Machine group Name.
rbacGroupId	String	Machine group ID.
riskScore	Nullable Enum	Risk score as evaluated by Microsoft Defender for Endpoint. Possible values are: None, Informational, Low, Medium, and High.
aadDeviceId	Nullable representation Guid	Microsoft Entra Device ID (when machine is Microsoft Entra joined).
machineTags	String collection	Set of machine tags.
exposureLevel	Nullable Enum	Exposure level as evaluated by Microsoft Defender for Endpoint. Possible values are: None, Low, Medium, and High.
deviceValue	Nullable Enum	The value of the device. Possible values are: Normal, Low, and High.
ipAddresses	IpAddress collection	Set of IpAddress objects. See Get machines API.
osArchitecture	String	Operating system architecture. Possible values are: 32-bit, 64-bit. Use this property instead of osProcessor.