Skip to content

security-detectionaction.md

Latest commit

 

History

History
52 lines (44 loc) · 2.07 KB

security-detectionaction.md

File metadata and controls

52 lines (44 loc) · 2.07 KB
title detectionAction resource type
description Describes the actions that will be taken after a detection is made by the custom detection rule.
author mmekler
ms.localizationpriority medium
ms.subservice security
doc_type resourcePageType
ms.date 03/06/2024

detectionAction resource type

Namespace: microsoft.graph.security

[!INCLUDE beta-disclaimer]

Describes the actions that will be taken after a detection is made by a custom detection rule.

Properties

Property Type Description
alertTemplate microsoft.graph.security.alertTemplate Template for the generated alert.
organizationalScope microsoft.graph.security.organizationalScope Groups to which the custom detection rule applies.
responseActions microsoft.graph.security.responseAction collection Actions taken on impacted assets as set in the custom detection rule.

Relationships

None.

JSON representation

The following JSON representation shows the resource type.

{
  "@odata.type": "#microsoft.graph.security.detectionAction",
  "alertTemplate": {
    "@odata.type": "microsoft.graph.security.alertTemplate"
  },
  "organizationalScope": {
    "@odata.type": "microsoft.graph.security.organizationalScope"
  },
  "responseActions": [
    {
      "@odata.type": "microsoft.graph.security.stopAndQuarantineFileResponseAction"
    }
  ]
}