Connectors
...
Actions
Get Investigation Collection Package
6 min
description retrieve a microsoft defender investigation package for an entity by using the unique id endpoint url /api/machineactions/{{id}}/getpackageuri method get inputs path parameters (object) – required id (string) – required output example \[ { "status code" 400, "response headers" { "date" "thu, 04 may 2023 17 45 50 gmt", "content type" "application/json; charset=utf 8", "transfer encoding" "chunked", "connection" "keep alive", "content encoding" "deflate", "vary" "accept encoding", "strict transport security" "max age=15724800; includesubdomains" }, "reason" "bad request", "json body" { "error" { "code" "invalidinput", "message" "provided guid is not a valid id for a collectinvestigationpackage action", "target" "|76dce355 471ae6d819782413 " } } } ] output parameters status code (number) reason (string) json body (object) error (object) code (string) message (string) target (string) response headers header type date string content type string transfer encoding string connection string content encoding string vary string strict transport security string