| title | description | author | localization_priority | ms.subservice | doc_type |
|---|---|---|---|---|---|
defenderThreatAction enum type |
Defender’s default action to take on detected Malware threats. |
jaiprakashmb |
Normal |
intune |
enumPageType |
Namespace: microsoft.graph
Important: Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
Note: The Microsoft Graph API for Intune requires an active Intune license for the tenant.
Defender’s default action to take on detected Malware threats.
| Member | Value | Description |
|---|---|---|
| deviceDefault | 0 | Apply action based on the update definition. |
| clean | 1 | Clean the detected threat. |
| quarantine | 2 | Quarantine the detected threat. |
| remove | 3 | Remove the detected threat. |
| allow | 4 | Allow the detected threat. |
| userDefined | 5 | Allow the user to determine the action to take with the detected threat. |
| block | 6 | Block the detected threat. |