fileEvidence resource type

Namespace: microsoft.graph.security

Important

APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

A file that is reported in the alert as evidence.

Inherits from alertEvidence.

Properties

Property	Type	Description
detectionStatus	microsoft.graph.security.detectionStatus	The status of the detection.The possible values are: detected, blocked, prevented, unknownFutureValue.
fileDetails	microsoft.graph.security.fileDetails	The file details.
mdeDeviceId	String	A unique identifier assigned to a device by Microsoft Defender for Endpoint.

Relationships

None.

JSON representation

The following is a JSON representation of the resource.

{
  "@odata.type": "#microsoft.graph.security.fileEvidence",
  "createdDateTime": "String (timestamp)",
  "verdict": "String",
  "remediationStatus": "String",
  "remediationStatusDetails": "String",
  "roles": [
    "String"
  ],
  "tags": [
    "String"
  ],
  "fileDetails": {
    "@odata.type": "microsoft.graph.security.fileDetails"
  },
  "detectionStatus": "String",
  "mdeDeviceId": "String"
}