deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-06-21 13:23:36 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Update files.md

Browse Source
This commit is contained in:
Denise Vangel-MSFT
2020-11-06 12:34:11 -08:00
parent 31e27dd219
commit c722e10fc8
1 changed files with 20 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files

40
windows/security/threat-protection/microsoft-defender-atp/files.md
View File

@ -1,6 +1,6 @@
--- ---
title: File resource type title: File resource type
description: Retrieve recent Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) alerts related to files. description: Retrieve recent Microsoft Defender for Endpoint alerts related to files.
keywords: apis, graph api, supported apis, get, alerts, recent keywords: apis, graph api, supported apis, get, alerts, recent
search.product: eADQiWindows 10XVcnh search.product: eADQiWindows 10XVcnh
ms.prod: w10 ms.prod: w10
@ -23,7 +23,7 @@ ms.topic: article
**Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) **Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631)
- Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink)
Represent a file entity in Defender for Endpoint. Represent a file entity in Defender for Endpoint.
@ -37,24 +37,24 @@ Method|Return Type |Description
## Properties ## Properties
Property | Type | Description |Property | Type | Description |
:---|:---|:--- |:---|:---|:---|
sha1 | String | Sha1 hash of the file content |sha1 | String | Sha1 hash of the file content |
sha256 | String | Sha256 hash of the file content |sha256 | String | Sha256 hash of the file content |
globalPrevalence | Nullable long | File prevalence across organization |globalPrevalence | Nullable long | File prevalence across organization |
globalFirstObserved | DateTimeOffset | First time the file was observed. |globalFirstObserved | DateTimeOffset | First time the file was observed |
globalLastObserved | DateTimeOffset | Last time the file was observed. |globalLastObserved | DateTimeOffset | Last time the file was observed |
size | Nullable long | Size of the file. |size | Nullable long | Size of the file |
fileType | String | Type of the file. |fileType | String | Type of the file |
isPeFile | Boolean | true if the file is portable executable (e.g. "DLL", "EXE", etc.) |isPeFile | Boolean | true if the file is portable executable (e.g. "DLL", "EXE", etc.) |
filePublisher | String | File publisher. |filePublisher | String | File publisher |
fileProductName | String | Product name. |fileProductName | String | Product name |
signer | String | File signer. |signer | String | File signer |
issuer | String | File issuer. |issuer | String | File issuer |
signerHash | String | Hash of the signing certificate. |signerHash | String | Hash of the signing certificate |
isValidCertificate | Boolean | Was signing certificate successfully verified by Defender for Endpoint agent. |isValidCertificate | Boolean | Was signing certificate successfully verified by Microsoft Defender for Endpoint agent |
determinationType | String | The determination type of the file. |determinationType | String | The determination type of the file |
determinationValue | String | Determination value. |determinationValue | String | Determination value |
## Json representation ## Json representation