New-MgBetaSecurityCaseEdiscoveryCaseNoncustodialDataSource

Module:

Microsoft.Graph.Beta.Security Module

Create a new ediscoveryNoncustodialDataSource object.

Note

To view the v1.0 release of this cmdlet, view New-MgSecurityCaseEdiscoveryCaseNoncustodialDataSource

Syntax

CreateExpanded (Default)

New-MgBetaSecurityCaseEdiscoveryCaseNoncustodialDataSource
    -EdiscoveryCaseId <String>
    [-ResponseHeadersVariable <String>]
    [-AdditionalProperties <Hashtable>]
    [-CreatedDateTime <DateTime>]
    [-DataSource <IMicrosoftGraphSecurityDataSource>]
    [-DisplayName <String>]
    [-HoldStatus <String>]
    [-Id <String>]
    [-LastIndexOperation <Hashtable>]
    [-LastModifiedDateTime <DateTime>]
    [-ReleasedDateTime <DateTime>]
    [-Status <String>]
    [-Headers <IDictionary>]
    [-WhatIf]
    [-Confirm]
    [<CommonParameters>]

Create

New-MgBetaSecurityCaseEdiscoveryCaseNoncustodialDataSource
    -EdiscoveryCaseId <String>
    -BodyParameter <IMicrosoftGraphSecurityEdiscoveryNoncustodialDataSource>
    [-ResponseHeadersVariable <String>]
    [-Headers <IDictionary>]
    [-WhatIf]
    [-Confirm]
    [<CommonParameters>]

CreateViaIdentityExpanded

New-MgBetaSecurityCaseEdiscoveryCaseNoncustodialDataSource
    -InputObject <ISecurityIdentity>
    [-ResponseHeadersVariable <String>]
    [-AdditionalProperties <Hashtable>]
    [-CreatedDateTime <DateTime>]
    [-DataSource <IMicrosoftGraphSecurityDataSource>]
    [-DisplayName <String>]
    [-HoldStatus <String>]
    [-Id <String>]
    [-LastIndexOperation <Hashtable>]
    [-LastModifiedDateTime <DateTime>]
    [-ReleasedDateTime <DateTime>]
    [-Status <String>]
    [-Headers <IDictionary>]
    [-WhatIf]
    [-Confirm]
    [<CommonParameters>]

CreateViaIdentity

New-MgBetaSecurityCaseEdiscoveryCaseNoncustodialDataSource
    -InputObject <ISecurityIdentity>
    -BodyParameter <IMicrosoftGraphSecurityEdiscoveryNoncustodialDataSource>
    [-ResponseHeadersVariable <String>]
    [-Headers <IDictionary>]
    [-WhatIf]
    [-Confirm]
    [<CommonParameters>]

Description

Create a new ediscoveryNoncustodialDataSource object.

Permissions

Permission type	Permissions (from least to most privileged)
Delegated (work or school account)	eDiscovery.Read.All, eDiscovery.ReadWrite.All,
Delegated (personal Microsoft account)	Not supported
Application	eDiscovery.Read.All, eDiscovery.ReadWrite.All,

Examples

Example 1: Code snippet

Import-Module Microsoft.Graph.Beta.Security

$params = @{
	dataSource = @{
		"@odata.type" = "microsoft.graph.security.siteSource"
		site = @{
			webUrl = "https://m365x809305.sharepoint.com/sites/Design-topsecret"
		}
	}
}

New-MgBetaSecurityCaseEdiscoveryCaseNoncustodialDataSource -EdiscoveryCaseId $ediscoveryCaseId -BodyParameter $params

This example shows how to use the New-MgBetaSecurityCaseEdiscoveryCaseNoncustodialDataSource Cmdlet.

Parameters

-AdditionalProperties

Additional Parameters

Parameter properties

Type:	Hashtable
Default value:	None
Supports wildcards:	False
DontShow:	False

Parameter sets

CreateExpanded

Position:	Named
Mandatory:	False
Value from pipeline:	False
Value from pipeline by property name:	False
Value from remaining arguments:	False

CreateViaIdentityExpanded

Position:	Named
Mandatory:	False
Value from pipeline:	False
Value from pipeline by property name:	False
Value from remaining arguments:	False

-BodyParameter

ediscoveryNoncustodialDataSource To construct, see NOTES section for BODYPARAMETER properties and create a hash table.

Parameter properties

Type:	IMicrosoftGraphSecurityEdiscoveryNoncustodialDataSource
Default value:	None
Supports wildcards:	False
DontShow:	False

Parameter sets

Create

Position:	Named
Mandatory:	True
Value from pipeline:	True
Value from pipeline by property name:	False
Value from remaining arguments:	False

CreateViaIdentity

Position:	Named
Mandatory:	True
Value from pipeline:	True
Value from pipeline by property name:	False
Value from remaining arguments:	False

-Confirm

Prompts you for confirmation before running the cmdlet.

Parameter properties

Type:	SwitchParameter
Default value:	None
Supports wildcards:	False
DontShow:	False
Aliases:	cf

Parameter sets

(All)

Position:	Named
Mandatory:	False
Value from pipeline:	False
Value from pipeline by property name:	False
Value from remaining arguments:	False

-CreatedDateTime

Created date and time of the dataSourceContainer entity.

Parameter properties

Type:	DateTime
Default value:	None
Supports wildcards:	False
DontShow:	False

Parameter sets

CreateExpanded

Position:	Named
Mandatory:	False
Value from pipeline:	False
Value from pipeline by property name:	False
Value from remaining arguments:	False

CreateViaIdentityExpanded

Position:	Named
Mandatory:	False
Value from pipeline:	False
Value from pipeline by property name:	False
Value from remaining arguments:	False

-DataSource

dataSource To construct, see NOTES section for DATASOURCE properties and create a hash table.

Parameter properties

Type:	IMicrosoftGraphSecurityDataSource
Default value:	None
Supports wildcards:	False
DontShow:	False

Parameter sets

CreateExpanded

Position:	Named
Mandatory:	False
Value from pipeline:	False
Value from pipeline by property name:	False
Value from remaining arguments:	False

CreateViaIdentityExpanded

Position:	Named
Mandatory:	False
Value from pipeline:	False
Value from pipeline by property name:	False
Value from remaining arguments:	False

-DisplayName

Display name of the dataSourceContainer entity.

Parameter properties

Type:	String
Default value:	None
Supports wildcards:	False
DontShow:	False

Parameter sets

CreateExpanded

Position:	Named
Mandatory:	False
Value from pipeline:	False
Value from pipeline by property name:	False
Value from remaining arguments:	False

CreateViaIdentityExpanded

Position:	Named
Mandatory:	False
Value from pipeline:	False
Value from pipeline by property name:	False
Value from remaining arguments:	False

-EdiscoveryCaseId

The unique identifier of ediscoveryCase

Parameter properties

Type:	String
Default value:	None
Supports wildcards:	False
DontShow:	False

Parameter sets

CreateExpanded

Position:	Named
Mandatory:	True
Value from pipeline:	False
Value from pipeline by property name:	False
Value from remaining arguments:	False

Create

Position:	Named
Mandatory:	True
Value from pipeline:	False
Value from pipeline by property name:	False
Value from remaining arguments:	False

-Headers

Optional headers that will be added to the request.

Parameter properties

Type:	IDictionary
Default value:	None
Supports wildcards:	False
DontShow:	False

Parameter sets

(All)

Position:	Named
Mandatory:	False
Value from pipeline:	True
Value from pipeline by property name:	False
Value from remaining arguments:	False

-HoldStatus

dataSourceHoldStatus

Parameter properties

Type:	String
Default value:	None
Supports wildcards:	False
DontShow:	False

Parameter sets

CreateExpanded

Position:	Named
Mandatory:	False
Value from pipeline:	False
Value from pipeline by property name:	False
Value from remaining arguments:	False

CreateViaIdentityExpanded

Position:	Named
Mandatory:	False
Value from pipeline:	False
Value from pipeline by property name:	False
Value from remaining arguments:	False

-Id

The unique identifier for an entity. Read-only.

Parameter properties

Type:	String
Default value:	None
Supports wildcards:	False
DontShow:	False

Parameter sets

CreateExpanded

Position:	Named
Mandatory:	False
Value from pipeline:	False
Value from pipeline by property name:	False
Value from remaining arguments:	False

CreateViaIdentityExpanded

Position:	Named
Mandatory:	False
Value from pipeline:	False
Value from pipeline by property name:	False
Value from remaining arguments:	False

-InputObject

Identity Parameter To construct, see NOTES section for INPUTOBJECT properties and create a hash table.

Parameter properties

Type:	ISecurityIdentity
Default value:	None
Supports wildcards:	False
DontShow:	False

Parameter sets

CreateViaIdentityExpanded

Position:	Named
Mandatory:	True
Value from pipeline:	True
Value from pipeline by property name:	False
Value from remaining arguments:	False

CreateViaIdentity

Position:	Named
Mandatory:	True
Value from pipeline:	True
Value from pipeline by property name:	False
Value from remaining arguments:	False

-LastIndexOperation

ediscoveryIndexOperation

Parameter properties

Type:	Hashtable
Default value:	None
Supports wildcards:	False
DontShow:	False

Parameter sets

CreateExpanded

Position:	Named
Mandatory:	False
Value from pipeline:	False
Value from pipeline by property name:	False
Value from remaining arguments:	False

CreateViaIdentityExpanded

Position:	Named
Mandatory:	False
Value from pipeline:	False
Value from pipeline by property name:	False
Value from remaining arguments:	False

-LastModifiedDateTime

Last modified date and time of the dataSourceContainer.

Parameter properties

Type:	DateTime
Default value:	None
Supports wildcards:	False
DontShow:	False

Parameter sets

CreateExpanded

Position:	Named
Mandatory:	False
Value from pipeline:	False
Value from pipeline by property name:	False
Value from remaining arguments:	False

CreateViaIdentityExpanded

Position:	Named
Mandatory:	False
Value from pipeline:	False
Value from pipeline by property name:	False
Value from remaining arguments:	False

-ReleasedDateTime

Date and time that the dataSourceContainer was released from the case.

Parameter properties

Type:	DateTime
Default value:	None
Supports wildcards:	False
DontShow:	False

Parameter sets

CreateExpanded

Position:	Named
Mandatory:	False
Value from pipeline:	False
Value from pipeline by property name:	False
Value from remaining arguments:	False

CreateViaIdentityExpanded

Position:	Named
Mandatory:	False
Value from pipeline:	False
Value from pipeline by property name:	False
Value from remaining arguments:	False

-ResponseHeadersVariable

Optional Response Headers Variable.

Parameter properties

Type:	String
Default value:	None
Supports wildcards:	False
DontShow:	False
Aliases:	RHV

Parameter sets

(All)

Position:	Named
Mandatory:	False
Value from pipeline:	False
Value from pipeline by property name:	False
Value from remaining arguments:	False

-Status

dataSourceContainerStatus

Parameter properties

Type:	String
Default value:	None
Supports wildcards:	False
DontShow:	False

Parameter sets

CreateExpanded

Position:	Named
Mandatory:	False
Value from pipeline:	False
Value from pipeline by property name:	False
Value from remaining arguments:	False

CreateViaIdentityExpanded

Position:	Named
Mandatory:	False
Value from pipeline:	False
Value from pipeline by property name:	False
Value from remaining arguments:	False

-WhatIf

Shows what would happen if the cmdlet runs. The cmdlet is not run.

Parameter properties

Type:	SwitchParameter
Default value:	None
Supports wildcards:	False
DontShow:	False
Aliases:	wi

Parameter sets

(All)

Position:	Named
Mandatory:	False
Value from pipeline:	False
Value from pipeline by property name:	False
Value from remaining arguments:	False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutBuffer, -OutVariable, -PipelineVariable, -ProgressAction, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

Inputs

Microsoft.Graph.Beta.PowerShell.Models.IMicrosoftGraphSecurityEdiscoveryNoncustodialDataSource

Microsoft.Graph.Beta.PowerShell.Models.ISecurityIdentity

System.Collections.IDictionary

Outputs

Microsoft.Graph.Beta.PowerShell.Models.IMicrosoftGraphSecurityEdiscoveryNoncustodialDataSource

Notes

COMPLEX PARAMETER PROPERTIES

To create the parameters described below, construct a hash table containing the appropriate properties. For information on hash tables, run Get-Help about_Hash_Tables.

BODYPARAMETER <IMicrosoftGraphSecurityEdiscoveryNoncustodialDataSource>: ediscoveryNoncustodialDataSource

• [(Any) <Object>]: This indicates any property can be added to this object.
• [CreatedDateTime <DateTime?>]: Created date and time of the dataSourceContainer entity.
• [DisplayName <String>]: Display name of the dataSourceContainer entity.
• [HoldStatus <String>]: dataSourceHoldStatus
• [LastModifiedDateTime <DateTime?>]: Last modified date and time of the dataSourceContainer.
• [ReleasedDateTime <DateTime?>]: Date and time that the dataSourceContainer was released from the case.
• [Status <String>]: dataSourceContainerStatus
• [Id <String>]: The unique identifier for an entity. Read-only.
• [DataSource <IMicrosoftGraphSecurityDataSource>]: dataSource
  • [(Any) <Object>]: This indicates any property can be added to this object.
  • [Id <String>]: The unique identifier for an entity. Read-only.
  • [CreatedBy <IMicrosoftGraphIdentitySet>]: identitySet
    • [(Any) <Object>]: This indicates any property can be added to this object.
    • [Application <IMicrosoftGraphIdentity>]: identity
      • [(Any) <Object>]: This indicates any property can be added to this object.
      • [DisplayName <String>]: The display name of the identity. This property is read-only.
      • [Id <String>]: The identifier of the identity. This property is read-only.
    • [Device <IMicrosoftGraphIdentity>]: identity
    • [User <IMicrosoftGraphIdentity>]: identity
  • [CreatedDateTime <DateTime?>]: The date and time the dataSource was created.
  • [DisplayName <String>]: The display name of the dataSource and is the name of the SharePoint site.
  • [HoldStatus <String>]: dataSourceHoldStatus
• [LastIndexOperation <IMicrosoftGraphSecurityEdiscoveryIndexOperation>]: ediscoveryIndexOperation
  • [(Any) <Object>]: This indicates any property can be added to this object.
  • [Action <String>]: caseAction
  • [CompletedDateTime <DateTime?>]: The date and time the operation was completed.
  • [CreatedBy <IMicrosoftGraphIdentitySet>]: identitySet
  • [CreatedDateTime <DateTime?>]: The date and time the operation was created.
  • [PercentProgress <Int32?>]: The progress of the operation.
  • [ResultInfo <IMicrosoftGraphResultInfo>]: resultInfo
    • [(Any) <Object>]: This indicates any property can be added to this object.
    • [Code <Int32?>]: The result code.
    • [Message <String>]: The message.
    • [Subcode <Int32?>]: The result sub-code.
  • [Status <String>]: caseOperationStatus
  • [Id <String>]: The unique identifier for an entity. Read-only.

DATASOURCE <IMicrosoftGraphSecurityDataSource>: dataSource

• [(Any) <Object>]: This indicates any property can be added to this object.
• [Id <String>]: The unique identifier for an entity. Read-only.
• [CreatedBy <IMicrosoftGraphIdentitySet>]: identitySet
  • [(Any) <Object>]: This indicates any property can be added to this object.
  • [Application <IMicrosoftGraphIdentity>]: identity
    • [(Any) <Object>]: This indicates any property can be added to this object.
    • [DisplayName <String>]: The display name of the identity. This property is read-only.
    • [Id <String>]: The identifier of the identity. This property is read-only.
  • [Device <IMicrosoftGraphIdentity>]: identity
  • [User <IMicrosoftGraphIdentity>]: identity
• [CreatedDateTime <DateTime?>]: The date and time the dataSource was created.
• [DisplayName <String>]: The display name of the dataSource and is the name of the SharePoint site.
• [HoldStatus <String>]: dataSourceHoldStatus

INPUTOBJECT <ISecurityIdentity>: Identity Parameter

• [AlertId <String>]: The unique identifier of alert
• [AnalyzedEmailId <String>]: The unique identifier of analyzedEmail
• [ArticleId <String>]: The unique identifier of article
• [ArticleIndicatorId <String>]: The unique identifier of articleIndicator
• [AttackSimulationOperationId <String>]: The unique identifier of attackSimulationOperation
• [AuditLogQueryId <String>]: The unique identifier of auditLogQuery
• [AuditLogRecordId <String>]: The unique identifier of auditLogRecord
• [AuthoredNoteId <String>]: The unique identifier of authoredNote
• [AuthorityTemplateId <String>]: The unique identifier of authorityTemplate
• [CaseOperationId <String>]: The unique identifier of caseOperation
• [CategoryTemplateId <String>]: The unique identifier of categoryTemplate
• [CitationTemplateId <String>]: The unique identifier of citationTemplate
• [CloudAppDiscoveryReportId <String>]: The unique identifier of cloudAppDiscoveryReport
• [CloudAppSecurityProfileId <String>]: The unique identifier of cloudAppSecurityProfile
• [CustomerInsightTenantId <String>]: The unique identifier of customerInsight
• [DataSourceId <String>]: The unique identifier of dataSource
• [DepartmentTemplateId <String>]: The unique identifier of departmentTemplate
• [DetectionRuleId <String>]: The unique identifier of detectionRule
• [DispositionReviewStageNumber <String>]: The unique identifier of dispositionReviewStage
• [DomainSecurityProfileId <String>]: The unique identifier of domainSecurityProfile
• [EdiscoveryCaseId <String>]: The unique identifier of ediscoveryCase
• [EdiscoveryCaseMemberId <String>]: The unique identifier of ediscoveryCaseMember
• [EdiscoveryCustodianId <String>]: The unique identifier of ediscoveryCustodian
• [EdiscoveryFileId <String>]: The unique identifier of ediscoveryFile
• [EdiscoveryHoldPolicyId <String>]: The unique identifier of ediscoveryHoldPolicy
• [EdiscoveryNoncustodialDataSourceId <String>]: The unique identifier of ediscoveryNoncustodialDataSource
• [EdiscoveryReviewSetId <String>]: The unique identifier of ediscoveryReviewSet
• [EdiscoveryReviewSetQueryId <String>]: The unique identifier of ediscoveryReviewSetQuery
• [EdiscoveryReviewTagId <String>]: The unique identifier of ediscoveryReviewTag
• [EdiscoveryReviewTagId1 <String>]: The unique identifier of ediscoveryReviewTag
• [EdiscoverySearchId <String>]: The unique identifier of ediscoverySearch
• [EmailThreatSubmissionId <String>]: The unique identifier of emailThreatSubmission
• [EmailThreatSubmissionPolicyId <String>]: The unique identifier of emailThreatSubmissionPolicy
• [EndUserNotificationDetailId <String>]: The unique identifier of endUserNotificationDetail
• [EndUserNotificationId <String>]: The unique identifier of endUserNotification
• [FilePlanReferenceTemplateId <String>]: The unique identifier of filePlanReferenceTemplate
• [FileSecurityProfileId <String>]: The unique identifier of fileSecurityProfile
• [FileThreatSubmissionId <String>]: The unique identifier of fileThreatSubmission
• [HealthIssueId <String>]: The unique identifier of healthIssue
• [HostComponentId <String>]: The unique identifier of hostComponent
• [HostCookieId <String>]: The unique identifier of hostCookie
• [HostId <String>]: The unique identifier of host
• [HostPairId <String>]: The unique identifier of hostPair
• [HostPortId <String>]: The unique identifier of hostPort
• [HostSecurityProfileId <String>]: The unique identifier of hostSecurityProfile
• [HostSslCertificateId <String>]: The unique identifier of hostSslCertificate
• [HostTrackerId <String>]: The unique identifier of hostTracker
• [IPSecurityProfileId <String>]: The unique identifier of ipSecurityProfile
• [IncidentId <String>]: The unique identifier of incident
• [IntelligenceProfileId <String>]: The unique identifier of intelligenceProfile
• [IntelligenceProfileIndicatorId <String>]: The unique identifier of intelligenceProfileIndicator
• [LandingPageDetailId <String>]: The unique identifier of landingPageDetail
• [LandingPageId <String>]: The unique identifier of landingPage
• [LoginPageId <String>]: The unique identifier of loginPage
• [PartnerSecurityAlertId <String>]: The unique identifier of partnerSecurityAlert
• [PassiveDnsRecordId <String>]: The unique identifier of passiveDnsRecord
• [PayloadId <String>]: The unique identifier of payload
• [ProviderTenantSettingId <String>]: The unique identifier of providerTenantSetting
• [RetentionEventId <String>]: The unique identifier of retentionEvent
• [RetentionEventTypeId <String>]: The unique identifier of retentionEventType
• [RetentionLabelId <String>]: The unique identifier of retentionLabel
• [SecureScoreControlProfileId <String>]: The unique identifier of secureScoreControlProfile
• [SecureScoreId <String>]: The unique identifier of secureScore
• [SecurityActionId <String>]: The unique identifier of securityAction
• [SecurityRequirementId <String>]: The unique identifier of securityRequirement
• [SecurityScoreHistoryId <String>]: The unique identifier of securityScoreHistory
• [SensitivityLabelId <String>]: The unique identifier of sensitivityLabel
• [SensorId <String>]: The unique identifier of sensor
• [SimulationAutomationId <String>]: The unique identifier of simulationAutomation
• [SimulationAutomationRunId <String>]: The unique identifier of simulationAutomationRun
• [SimulationId <String>]: The unique identifier of simulation
• [SiteSourceId <String>]: The unique identifier of siteSource
• [SslCertificateId <String>]: The unique identifier of sslCertificate
• [SubcategoryTemplateId <String>]: The unique identifier of subcategoryTemplate
• [SubdomainId <String>]: The unique identifier of subdomain
• [SubjectRightsRequestId <String>]: The unique identifier of subjectRightsRequest
• [TiIndicatorId <String>]: The unique identifier of tiIndicator
• [TrainingCampaignId <String>]: The unique identifier of trainingCampaign
• [TrainingId <String>]: The unique identifier of training
• [TrainingLanguageDetailId <String>]: The unique identifier of trainingLanguageDetail
• [UnifiedGroupSourceId <String>]: The unique identifier of unifiedGroupSource
• [UrlThreatSubmissionId <String>]: The unique identifier of urlThreatSubmission
• [UserId <String>]: The unique identifier of user
• [UserPrincipalName <String>]: Alternate key of user
• [UserSecurityProfileId <String>]: The unique identifier of userSecurityProfile
• [UserSourceId <String>]: The unique identifier of userSource
• [VulnerabilityComponentId <String>]: The unique identifier of vulnerabilityComponent
• [VulnerabilityId <String>]: The unique identifier of vulnerability
• [WhoisHistoryRecordId <String>]: The unique identifier of whoisHistoryRecord
• [WhoisRecordId <String>]: The unique identifier of whoisRecord

Related Links

• https://learn.microsoft.com/powershell/module/microsoft.graph.beta.security/new-mgbetasecuritycaseediscoverycasenoncustodialdatasource
• https://learn.microsoft.com/graph/api/security-ediscoverycase-post-noncustodialdatasources?view=graph-rest-beta