defenderAttackSurfaceType enum type

Important: Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.

Note: The Microsoft Graph API for Intune requires an active Intune license for the tenant.

Possible values of Defender Attack Surface Reduction Rules


Member Value Description
userDefined 0 Device default value, no intent.
block 1 Block functionality.
auditMode 2 Does not change functionality but generate logs.