Actions41
- Advanced Query Actions
- Alert Actions
- Exposure Score Actions
- Indicator Actions
- Investigation Actions
- Machine Actions
- Machine Action Actions
- Recommendation Actions
- Remediation Actions
- Software Actions
- Vulnerability Actions
Indicator → Delete Indicator
AI-generatedSummary
Delete an indicator from Microsoft Defender by its unique ID to remove it permanently.
Inputs
- Authentication (required) — Specify the authentication method; currently only OAuth2 is supported.
- Indicator ID (required) — The unique identifier of the indicator to delete, provided as a string.
- Request Options — Optional HTTP request settings including batching configuration, SSL certificate validation bypass, proxy URL, and timeout in milliseconds.
Output shape
no body — success/failure only
Executes a DELETE request to the /api/indicators/{indicatorId} endpoint; the response contains no body data, only status indicating success or failure of the deletion.