建议资源类型Recommendation resource type

适用于:Microsoft Defender for EndpointApplies to: Microsoft Defender for Endpoint

想要体验适用于终结点的 Defender?Want to experience Defender for Endpoint? 注册免费试用版。Sign up for a free trial.

备注

如果你是美国政府客户,请使用 Microsoft Defender for Endpoint 中针对美国政府客户的 URI。If you are a US Government customer, please use the URIs listed in Microsoft Defender for Endpoint for US Government customers.

提示

为了提高性能,可以使用距离地理位置更近的服务器:For better performance, you can use server closer to your geo location:

  • api-us.securitycenter.microsoft.comapi-us.securitycenter.microsoft.com
  • api-eu.securitycenter.microsoft.comapi-eu.securitycenter.microsoft.com
  • api-uk.securitycenter.microsoft.comapi-uk.securitycenter.microsoft.com

重要

某些信息与预发布的产品有关,在商业发布之前可能有重大修改。Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft 对此处所提供的信息不作任何明示或默示的保证。Microsoft makes no warranties, express or implied, with respect to the information provided here.

方法Methods

方法Method 返回类型Return Type 说明Description
列出所有建议List all recommendations 建议集合Recommendation collection 检索影响组织的所有安全建议的列表Retrieves a list of all security recommendations affecting the organization
按 Id 获取建议Get recommendation by Id 建议Recommendation 按 ID 检索安全建议Retrieves a security recommendation by its ID
获取建议软件Get recommendation software 软件Software 检索与特定软件相关的安全建议Retrieves a security recommendation related to a specific software
获取建议设备Get recommendation devices MachineRef 集合MachineRef collection 检索与安全建议关联的设备列表Retrieves a list of devices associated with the security recommendation
获取建议漏洞Get recommendation vulnerabilities 漏洞 集合Vulnerability collection 检索与安全建议关联的漏洞列表Retrieves a list of vulnerabilities associated with the security recommendation

属性Properties

属性Property 类型Type 说明Description
idid 字符串String 建议 IDRecommendation ID
productNameproductName StringString 相关软件名称Related software name
recommendationNamerecommendationName 字符串String 建议名称Recommendation name
漏洞Weaknesses 长型Long 发现的漏洞数量Number of discovered vulnerabilities
供应商Vendor 字符串String 相关供应商名称Related vendor name
recommendedVersionrecommendedVersion 字符串String 建议版本Recommended version
recommendationCategoryrecommendationCategory 字符串String 建议类别。Recommendation category. 可能的值包括:"Accounts"、"Application"、"Network"、"OS"、"SecurityStack"Possible values are: "Accounts", "Application", "Network", "OS", "SecurityStack
subCategorysubCategory 字符串String 建议子类别Recommendation sub-category
severityScoreseverityScore 双精度Double 配置对组织的 Microsoft 设备安全分数的潜在影响 (1-10) Potential impact of the configuration to the organization's Microsoft Secure Score for Devices (1-10)
publicExploitpublicExploit 布尔值Boolean 公共攻击可用Public exploit is available
activeAlertactiveAlert 布尔值Boolean 活动警报与此建议关联Active alert is associated with this recommendation
associatedThreatsassociatedThreats String collectionString collection 威胁分析报告与此建议关联Threat analytics report is associated with this recommendation
remediationTyperemediationType 字符串String 修正类型。Remediation type. 可能的值是:"ConfigurationChange"、"Update"、"Upgrade"、"Uninstall"Possible values are: "ConfigurationChange","Update","Upgrade","Uninstall"
状态Status 枚举Enum 建议例外状态。Recommendation exception status. 可能的值是:"Active"和"Exception"Possible values are: "Active" and "Exception"
configScoreImpactconfigScoreImpact 双精度Double Microsoft 设备影响安全分数Microsoft Secure Score for Devices impact
exposureImpacteexposureImpacte 双精度Double 曝光分数影响Exposure score impact
totalMachineCounttotalMachineCount 长型Long 已安装设备的数量Number of installed devices
exposedMachinesCountexposedMachinesCount 长型Long 向漏洞公开的已安装设备的数量Number of installed devices that are exposed to vulnerabilities
nonProductivityImpactedAssetsnonProductivityImpactedAssets 长型Long 不受影响的设备数量Number of devices which are not affected
relatedComponentrelatedComponent 字符串String 相关软件组件Related software component