Actions41
- Advanced Query Actions
- Alert Actions
- Exposure Score Actions
- Indicator Actions
- Investigation Actions
- Machine Actions
- Machine Action Actions
- Recommendation Actions
- Remediation Actions
- Software Actions
- Vulnerability Actions
Machine Action → List Machine Actions
AI-generatedSummary
Retrieve a paginated list of machine actions executed in Microsoft Defender Endpoint, optionally filtered and sorted using OData query operators.
Inputs
- Authentication (required) — Select OAuth2 for authentication with Microsoft Defender API.
- OData Operators — Optional collection of OData operators to refine the returned machine actions: Filter (by fields like ID, name, severity), Top (limit number of results), and Skip (offset results).
Output shape
a JSON list of machine action objects
The output is the raw list of machine actions returned by the Microsoft Defender API endpoint '/api/machineactions'. The request supports OData query parameters for filtering, limiting, and paging results. Pagination must be managed by adjusting the 'Top' and 'Skip' OData operators manually. No explicit error envelope is described.