Edit

defenderThreatAction enum type

  • Article

Namespace: microsoft.graph

Note: The Microsoft Graph API for Intune requires an active Intune license for the tenant.

Defender’s default action to take on detected Malware threats.

Members

Member Value Description
deviceDefault 0 Apply action based on the update definition.
clean 1 Clean the detected threat.
quarantine 2 Quarantine the detected threat.
remove 3 Remove the detected threat.
allow 4 Allow the detected threat.
userDefined 5 Allow the user to determine the action to take with the detected threat.
block 6 Block the detected threat.