Edit

Share via


collectInvestigationPackageIncidentTaskResponseAction resource type

Namespace: microsoft.graph.security

Important

APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

Represents an action to collect device logs and investigation package from a device in Microsoft Defender XDR. This package contains system information that helps investigate security incidents on the device.

Inherits from microsoft.graph.security.incidentTaskResponseAction.

Properties

Property Type Description
identifierValue String Required. The identifier of the device from which to collect the investigation package. Inherited from microsoft.graph.security.incidentTaskResponseAction.

Relationships

None.

JSON representation

The following JSON representation shows the resource type.

{
  "@odata.type": "#microsoft.graph.security.collectInvestigationPackageIncidentTaskResponseAction",
  "identifierValue": "String"
}