Merge branch 'master' into fpfn-mdav-mdatp

This commit is contained in:
Denise Vangel-MSFT 2021-01-20 14:30:51 -08:00
commit 33241dd0aa
2 changed files with 40 additions and 3 deletions

View File

@ -368,5 +368,44 @@ HTTP GET https://api.securitycenter.microsoft.com/api/machines/123321d0c675eaa4
4 4
``` ```
### Example 8
Get all the devices with 'computerDnsName' starting with 'mymachine':
```http
HTTP GET https://api.securitycenter.microsoft.com/api/machines?$filter=startswith(computerDnsName,'mymachine')
```
**Response:**
```json
json{
"@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#Machines",
"value": [
{
"id": "1e5bc9d7e413ddd7902c2932e418702b84d0cc07",
"computerDnsName": "mymachine1.contoso.com",
"firstSeen": "2018-08-02T14:55:03.7791856Z",
"lastSeen": "2018-08-02T14:55:03.7791856Z",
"osPlatform": "Windows10",
"version": "1709",
"osProcessor": "x64",
"lastIpAddress": "172.17.230.209",
"lastExternalIpAddress": "167.220.196.71",
"osBuild": 18209,
"healthStatus": "ImpairedCommunication",
"rbacGroupId": 140,
"rbacGroupName": "The-A-Team",
"riskScore": "Low",
"exposureLevel": "Medium",
"isAadJoined": true,
"aadDeviceId": "80fe8ff8-2624-418e-9591-41f0491218f9",
"machineTags": [ "test tag 1", "ExampleTag" ]
},
...
]
}
```
## See also ## See also
- [Microsoft Defender for Endpoint APIs](apis-intro.md) - [Microsoft Defender for Endpoint APIs](apis-intro.md)

View File

@ -41,9 +41,7 @@ Here is a list of the types of data being collected:
### Web page or Network information ### Web page or Network information
- Connection information only when a malicious connection or web page is detected. - Domain name of the website only when a malicious connection or web page is detected.
- Protocol type (such as HTTP, HTTPS, etc.) only when a malicious connection or web page is detected.
### Device and account information ### Device and account information