Skip to content

security-airmanualinvestigationdata.md

Latest commit

 

History

History
41 lines (31 loc) · 1.23 KB

security-airmanualinvestigationdata.md

File metadata and controls

41 lines (31 loc) · 1.23 KB
title airManualInvestigationData resource type
description Represents an audit record for Automated Investigation and Response (AIR) manual investigation events.
author diksha27
ms.subservice compliance
ms.localizationpriority medium
doc_type resourcePageType
ms.date 03/05/2026
toc.title AIR manual investigation data

airManualInvestigationData resource type

Namespace: microsoft.graph.security

[!INCLUDE beta-disclaimer]

Represents an audit record for Automated Investigation and Response (AIR) manual investigation events. This resource captures information about manually triggered threat investigations in Microsoft Defender.

Inherits from microsoft.graph.security.auditData. The audit data for this record type is returned as the auditData property in an auditLogRecord.

Properties

None.

Relationships

None.

JSON representation

The following JSON representation shows the resource type.

{
  "@odata.type": "#microsoft.graph.security.airManualInvestigationData"
}