Actions41
- Advanced Query Actions
- Alert Actions
- Exposure Score Actions
- Indicator Actions
- Investigation Actions
- Machine Actions
- Machine Action Actions
- Recommendation Actions
- Remediation Actions
- Software Actions
- Vulnerability Actions
Recommendation → Get Machines By Recommendation
AI-generatedSummary
Retrieve a list of machines linked to a specific security recommendation by its ID in Microsoft Defender.
Inputs
- Authentication — Choose OAuth2 for authentication (default).
- Recommendation ID (required) — The ID of the recommendation to get linked machines for.
Output shape
a list of machine references associated with the specified recommendation
The response contains machine references linked to the given recommendation ID. The operation uses an HTTP GET request to the endpoint /api/recommendations/{{recommendationId}}/machineReferences, with batching and request options available as node settings.