| title | fileEvidence resource type |
|---|---|
| description | A file that is reported in the alert as evidence. |
| ms.date | 11/11/2022 |
| author | BenAlfasi |
| ms.localizationpriority | medium |
| ms.subservice | security |
| doc_type | resourcePageType |
Namespace: microsoft.graph.security
A file that is reported in the alert as evidence.
Inherits from alertEvidence.
| Property | Type | Description |
|---|---|---|
| detectionStatus | microsoft.graph.security.detectionStatus | The status of the detection.The possible values are: detected, blocked, prevented, unknownFutureValue. |
| fileDetails | microsoft.graph.security.fileDetails | The file details. |
| mdeDeviceId | String | A unique identifier assigned to a device by Microsoft Defender for Endpoint. |
None.
The following JSON representation shows the resource type.
{
"@odata.type": "#microsoft.graph.security.fileEvidence",
"createdDateTime": "String (timestamp)",
"verdict": "String",
"remediationStatus": "String",
"remediationStatusDetails": "String",
"roles": [
"String"
],
"tags": [
"String"
],
"fileDetails": {
"@odata.type": "microsoft.graph.security.fileDetails"
},
"detectionStatus": "String",
"mdeDeviceId": "String"
}