defenderThreatAction enum type
Namespace: microsoft.graph
Note: The Microsoft Graph API for Intune requires an active Intune license for the tenant.
Defender’s default action to take on detected Malware threats.
Members
| Member | Value | Description |
|---|---|---|
| deviceDefault | 0 | Apply action based on the update definition. |
| clean | 1 | Clean the detected threat. |
| quarantine | 2 | Quarantine the detected threat. |
| remove | 3 | Remove the detected threat. |
| allow | 4 | Allow the detected threat. |
| userDefined | 5 | Allow the user to determine the action to take with the detected threat. |
| block | 6 | Block the detected threat. |