defenderAttackSurfaceType enum type

Important: APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported.

Note: The Microsoft Graph API for Intune requires an active Intune license for the tenant.

Possible values of Defender Attack Surface Reduction Rules


Member Value Description
userDefined 0 Device default value, no intent.
block 1 Block functionality.
auditMode 2 Does not change functionality but generate logs.