mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-05-14 22:37:22 +00:00
delete page
This commit is contained in:
parent
0369dba6b1
commit
c38a104e09
@ -2044,6 +2044,11 @@
|
|||||||
"source_path": "windows/security/threat-protection/windows-defender-atp/supported-response-apis-windows-defender-advanced-threat-protection.md",
|
"source_path": "windows/security/threat-protection/windows-defender-atp/supported-response-apis-windows-defender-advanced-threat-protection.md",
|
||||||
"redirect_url": "https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/supported-response-apis",
|
"redirect_url": "https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/supported-response-apis",
|
||||||
"redirect_document_id": true
|
"redirect_document_id": true
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"source_path": "windows/security/threat-protection/microsoft-defender-atp/supported-response-apis.md",
|
||||||
|
"redirect_url": "https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-list",
|
||||||
|
"redirect_document_id": false
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
"source_path": "windows/threat-protection/windows-defender-atp/threat-indicator-concepts-windows-defender-advanced-threat-protection.md",
|
"source_path": "windows/threat-protection/windows-defender-atp/threat-indicator-concepts-windows-defender-advanced-threat-protection.md",
|
||||||
|
@ -1,52 +0,0 @@
|
|||||||
---
|
|
||||||
title: Supported Microsoft Defender Advanced Threat Protection response APIs
|
|
||||||
description: Learn about the specific response-related Microsoft Defender Advanced Threat Protection API calls.
|
|
||||||
keywords: response apis, graph api, supported apis, actor, alerts, device, user, domain, ip, file
|
|
||||||
search.product: eADQiWindows 10XVcnh
|
|
||||||
search.appverid: met150
|
|
||||||
ms.prod: m365-security
|
|
||||||
ms.mktglfcycl: deploy
|
|
||||||
ms.sitesec: library
|
|
||||||
ms.pagetype: security
|
|
||||||
ms.author: macapara
|
|
||||||
author: mjcaparas
|
|
||||||
ms.localizationpriority: medium
|
|
||||||
manager: dansimp
|
|
||||||
audience: ITPro
|
|
||||||
ms.collection: M365-security-compliance
|
|
||||||
ms.topic: conceptual
|
|
||||||
ms.technology: mde
|
|
||||||
---
|
|
||||||
|
|
||||||
# Supported Microsoft Defender for Endpoint query APIs
|
|
||||||
|
|
||||||
[!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)]
|
|
||||||
|
|
||||||
|
|
||||||
**Applies to:**
|
|
||||||
- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631)
|
|
||||||
|
|
||||||
> [!TIP]
|
|
||||||
> Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-supported-response-apis-abovefoldlink)
|
|
||||||
|
|
||||||
Learn about the supported response-related API calls you can run and details such as the required request headers, and expected response from the calls.
|
|
||||||
|
|
||||||
## In this section
|
|
||||||
Topic | Description
|
|
||||||
:---|:---
|
|
||||||
Collect investigation package | Run this API to collect an investigation package from a device.
|
|
||||||
Isolate device | Run this API to isolate a device from the network.
|
|
||||||
Unisolate device | Remove a device from isolation.
|
|
||||||
Restrict code execution | Run this API to contain an attack by stopping malicious processes. You can also lock down a device and prevent subsequent attempts of potentially malicious programs from running.
|
|
||||||
Unrestrict code execution | Run this to reverse the restriction of applications policy after you have verified that the compromised device has been remediated.
|
|
||||||
Run antivirus scan | Remotely initiate an antivirus scan to help identify and remediate malware that might be present on a compromised device.
|
|
||||||
Stop and quarantine file | Run this call to stop running processes, quarantine files, and delete persistency such as registry keys.
|
|
||||||
Request sample | Run this call to request a sample of a file from a specific device. The file will be collected from the device and uploaded to a secure storage.
|
|
||||||
Block file | Run this API to prevent further propagation of an attack in your organization by banning potentially malicious files or suspected malware.
|
|
||||||
Unblock file | Allow a file run in the organization using Microsoft Defender Antivirus.
|
|
||||||
Get package SAS URI | Run this API to get a URI that allows downloading an investigation package.
|
|
||||||
Get MachineAction object | Run this API to get MachineAction object.
|
|
||||||
Get MachineActions collection | Run this to get MachineAction collection.
|
|
||||||
Get FileActions collection | Run this API to get FileActions collection.
|
|
||||||
Get FileMachineAction object | Run this API to get FileMachineAction object.
|
|
||||||
Get FileMachineActions collection | Run this API to get FileMachineAction collection.
|
|
Loading…
x
Reference in New Issue
Block a user