blockFileResponseAction resource type

Namespace: microsoft.graph.security

Important

APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

Describes a response action that blocks a file from running on devices controlled by Microsoft Defender for Endpoint.

Inherits from microsoft.graph.security.responseAction.

Properties

Property	Type	Description
identifier	microsoft.graph.security.fileEntityIdentifier	Unique identifier for the response action. The possible values are: sha1, initiatingProcessSHA1, sha256, initiatingProcessSHA256, unknownFutureValue.
deviceGroupNames	String collection	Device groups to which the actions set in the custom detection rule are applied. More information

Relationships

None.

JSON representation

The following JSON representation shows the resource type.

{
  "@odata.type": "#microsoft.graph.security.blockFileResponseAction",
  "identifier": "String",
  "deviceGroupNames": [
    "String"
  ]
}