GET http://[host-proxy]/api/view/DefenderBulkActions/schema/?hierarchy=[hierarchy]&format=json&schema=1
{
"$schema": "http://json-schema.org/draft-03/schema",
"type": "object",
"properties": {
"filter": {
"title": "Device Filter",
"description": "Select the type of Defender for Endpoint device to list below for selection to bulk update.",
"type": "string",
"default": "All",
"choices": [
{
"value": "All",
"title": "All"
},
{
"value": "Windows",
"title": "Windows"
},
{
"value": "macOS",
"title": "macOS"
},
{
"value": "Linux",
"title": "Linux"
},
{
"value": "Android",
"title": "Android"
},
{
"value": "iOS",
"title": "iOS"
}
]
},
"operation": {
"title": "Operation",
"type": "string",
"required": true,
"default": "Scan",
"choices": [
{
"value": "Scan",
"title": "Scan"
},
{
"value": "Isolate",
"title": "Isolate"
},
{
"value": "Unisolate",
"title": "Unisolate"
},
{
"value": "Offboard",
"title": "Offboard"
},
{
"value": "Restrict",
"title": "Restrict Code Execution"
},
{
"value": "Unrestrict",
"title": "Unrestrict Code Execution"
},
{
"value": "CollectInvestigationPackage",
"title": "Collect Investigation Package"
},
{
"value": "StopAndQuarantineFile",
"title": "Stop and Quarantine File"
}
]
},
"comments": {
"title": "Comment",
"description": "A comment to be added for this device action.",
"type": "string"
},
"sha1": {
"title": "Machine SHA1",
"description": "SHA1 hash of the file to be quarantined.",
"type": "string"
},
"scanType": {
"title": "Type",
"description": "Select the type of scan to perform.",
"type": "string",
"default": "Full",
"choices": [
{
"value": "Full",
"title": "Full"
},
{
"value": "Quick",
"title": "Quick"
}
]
},
"isolationType": {
"title": "Isolation Type",
"description": "Select the type of isolation to perform.",
"type": "string",
"default": "Full",
"choices": [
{
"value": "Full",
"title": "Full"
},
{
"value": "Selective",
"title": "Selective"
},
{
"value": "UnManagedDevice",
"title": "UnManaged Device"
}
]
},
"targetDevices": {
"title": "Target Defender Devices",
"description": "List of Defender for Endpoint devices that will be updated.",
"type": "array",
"items": {
"type": "string"
}
}
},
"schema_version": "0.1"
}