deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-29 13:47:23 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

update autoir api

Browse Source
This commit is contained in:
Joey Caparas 2019-03-11 15:44:45 -07:00
parent 28a1b781bb
commit cd9b3dc8b6
1 changed files with 5 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
windows/security/threat-protection/windows-defender-atp/initiate-autoir-investigation-windows-defender-advanced-threat-protection-new.md
View File

@ -14,12 +14,11 @@ manager: dansimp
audience: ITPro audience: ITPro
ms.collection: M365-security-compliance ms.collection: M365-security-compliance
ms.topic: article ms.topic: article
ms.date: 12/08/2017
--- ---
# Initiate AutoIR Investigation API # Initiate AutoIR Investigation API
**Applies to:** **Applies to:**
- Windows Defender Advanced Threat Protection (Windows Defender ATP) - [Windows Defender Advanced Threat Protection (Windows Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559)
> [!IMPORTANT] > [!IMPORTANT]
> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. > Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
@ -48,7 +47,7 @@ Delegated (work or school account) | Alert.ReadWrite | 'Read and write alerts'
## HTTP request ## HTTP request
``` ```
POST https://api.securitycenter.windows.com/api/machines/{id}/InitiateAutoIRInvestigation POST https://api.securitycenter.windows.com/api/machines/{id}/InitiateInvestigation
``` ```
## Request headers ## Request headers
@ -66,7 +65,7 @@ Parameter | Type | Description
Comment | String | Comment to associate with the action. **Required**. Comment | String | Comment to associate with the action. **Required**.
## Response ## Response
If successful, this method returns 200 OK response code with object that holds the investigation id in the "value" parameter. If machine was not found - 404 Not Found. If successful, this method returns 200 OK response code with object that holds the investigation ID in the "value" parameter. If machine was not found - 404 Not Found.
## Example ## Example
@ -77,10 +76,10 @@ Here is an example of the request.
[!include[Improve request performance](improverequestperformance-new.md)] [!include[Improve request performance](improverequestperformance-new.md)]
``` ```
POST https://api.securitycenter.windows.com/api/machines/fb9ab6be3965095a09c057be7c90f0a2/InitiateAutoIRInvestigation POST https://api.securitycenter.windows.com/api/machines/fb9ab6be3965095a09c057be7c90f0a2/InitiateInvestigation
Content-type: application/json Content-type: application/json
{ {
"Comment": "Initiate AutoIR investigation on machine fb9ab6be3965095a09c057be7c90f0a2" "Comment": "Initiate an investigation on machine fb9ab6be3965095a09c057be7c90f0a2"
} }
``` ```