You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: defender-endpoint/api/device-health-api-methods-properties.md
+6-8Lines changed: 6 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,7 +5,7 @@ ms.service: defender-endpoint
5
5
ms.author: deniseb
6
6
author: denisebmsft
7
7
ms.localizationpriority: medium
8
-
ms.date: 02/18/2025
8
+
ms.date: 02/19/2025
9
9
manager: deniseb
10
10
ms.reviewr: mkaminska
11
11
audience: ITPro
@@ -24,7 +24,6 @@ search.appverid: met150
24
24
**Applies to:**
25
25
26
26
-[Microsoft Defender for Endpoint Plan 2](../microsoft-defender-endpoint.md)
27
-
28
27
-[Microsoft Defender XDR](/defender-xdr)
29
28
30
29
> Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://go.microsoft.com/fwlink/p/?linkid=2225630&clcid=0x409&culture=en-us&country=us)
@@ -77,7 +76,7 @@ Data that is collected using either '_JSON response_ or _via files_' is the curr
77
76
|`avIsEngineUpToDate`| String | Up-to-date status of antivirus engine | "True", "False", "Unknown" |
78
77
|`avIsPlatformUpToDate`| String | Up-to-date status of antivirus platform | "True", "False", "Unknown" |
79
78
|`avIsSignatureUpToDate`| String | Up-to-date status of antivirus signature | "True", "False", "Unknown" |
80
-
|`avMode`| String | Antivirus mode. | Each mode is a string typed integer value ranging from 0 to 5. Refer to the following mapping to see its value's meaning: <br/>'' = Other<br/>'0' = Active<br/>'1' = Passive<br/>'2' = Disabled<br/>'3' = Other<br/>'4' = EDRBlocked<br/>'5' = PassiveAudit |
79
+
|`avMode`| String | Antivirus mode. | Each mode is a string typed integer value ranging from 0 to 5. <br/>`''` = `Other`<br/>`0` = `Active`<br/>`1` = `Passive`<br/>`2` = `Disabled`<br/>`3` = `Other`<br/>`4` = `EDRBlocked`<br/>`5` = `PassiveAudit`|
81
80
|`avPlatformUpdateTime`| DateTimeOffset | Datetime when antivirus platform was last updated on device | "2022-08-04T12:44:02Z" |
82
81
|`avPlatformVersion`| String | Antivirus platform version | "4.18.2203.5" |
83
82
|`avSignaturePublishTime`| DateTimeOffset | Datetime when antivirus security intelligence build was released | "2022-08-04T12:44:02Z" |
@@ -106,20 +105,19 @@ Data that is collected using either '_JSON response_ or _via files_' is the curr
106
105
> Information in this section relates to prereleased product which can be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
107
106
108
107
> [!NOTE]
109
-
>
110
-
> - The files are gzip compressed & in multiline Json format.
108
+
> - The files are gzip-compressed and in multiline `.json` format.
111
109
> - The download URLs are only valid for 3 hours; otherwise you can use the parameter.
112
110
> - For maximum download speed of your data, you can make sure you're downloading from the same Azure region that your data resides.
113
-
> - Each record is approximately 1KB of data. You should take this into account when choosing the correct pageSize parameter for you.
114
-
> -Some more columns might be returned in the response. These columns are temporary and might be removed, so use only the documented columns.
111
+
> - Each record uses approximately 1KB of data. You should take this into account when choosing the correct `pageSize` parameter.
112
+
> -More columns might be returned in the response. These columns are temporary and might be removed, so use only the documented columns.
115
113
116
114
| Property (ID) | Data type | Description | Example of a returned value |
117
115
|---|---|---|---|
118
116
| Export files | array[string]| A list of download URLs for files holding the current snapshot of the organization. |["https://tvmexportstrstgeus.blob.core.windows.net/tvm-export...1", "https://tvmexportstrstgeus.blob.core.windows.net/tvm-export...2"]|
119
117
| GeneratedTime | String | The time that the export was generated. | 2022-05-20T08:00:00Z |
120
118
121
119
> [!NOTE]
122
-
> In each of the Export filesa property "DeviceGatheredInfo" containing the data about Antivirus information can be found. Each of its attributes can provide you with information on the device's health and its status.
120
+
> In each of the export files, there's a property called `DeviceGatheredInfo`, which contains antivirus data. Each of its attributes can provide you with information on the device's health and its status.
0 commit comments