You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: defender-endpoint/api/run-live-response.md
+8-7Lines changed: 8 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -42,13 +42,13 @@ Runs a sequence of live response commands on a device
42
42
43
43
## Limitations
44
44
45
-
1. Rate limitations for this API are 10 calls per minute (additional requests are responded with HTTP 429).
45
+
1. Rate limitations for this API are 10 calls per minute (more requests are responded with HTTP 429).
46
46
47
47
2. 25 concurrently running sessions (requests exceeding the throttling limit receives a "429 - Too many requests" response).
48
48
49
49
3. If the machine isn't available, the session is queued for up to three days.
50
50
51
-
4. RunScript command timeouts after 10 minutes.
51
+
4. RunScript command time-outs after 10 minutes.
52
52
53
53
5. Live response commands can't be queued up and can only be executed one at a time.
54
54
@@ -61,7 +61,7 @@ Runs a sequence of live response commands on a device
61
61
8. Multiple live response sessions can't be executed on the same machine (if live response action is already running, subsequent requests are responded to with HTTP 400 - ActiveRequestAlreadyExists).
62
62
63
63
> [!NOTE]
64
-
> Live response actions initiated from the Device page are not available in the machineactions API.
64
+
> Live response actions initiated from the Device page aren't available in the `machineactions` API.
65
65
66
66
## Minimum Requirements
67
67
@@ -85,7 +85,7 @@ Before you can initiate a session on a device, make sure you fulfill the followi
85
85
- Version 1809 (with [KB4537818](https://support.microsoft.com/help/4537818/windows-10-update-kb4537818))
-**macOS**[(requires other configuration profiles)](../microsoft-defender-endpoint-mac.md)
89
89
- 13 (Ventura)
90
90
- 12 (Monterey)
91
91
- 11 (Big Sur)
@@ -126,14 +126,14 @@ POST https://api.securitycenter.microsoft.com/API/machines/{machine_id}/runliver
126
126
|Command Type|Parameters|Description|
127
127
|---|---|---|
128
128
|PutFile|Key: FileName <p> Value: \<file name\>|Puts a file from the library to the device. Files are saved in a working folder and are deleted when the device restarts by default. NOTE: Doesn't have a response result. |
129
-
|RunScript|Key: ScriptName <br> Value: \<Script from library\> <p> Key: Args <br> Value: \<Script arguments\>|Runs a script from the library on a device. <p> The Args parameter is passed to your script. <p> Timeouts after 10 minutes.|
129
+
|RunScript|Key: ScriptName <br> Value: \<Script from library\> <p> Key: Args <br> Value: \<Script arguments\>|Runs a script from the library on a device. <p> The Args parameter is passed to your script. <p> Time-outs after 10 minutes.|
130
130
|GetFile|Key: Path <br> Value: \<File path\>|Collect file from a device. NOTE: Backslashes in path must be escaped.|
131
131
132
132
## Response
133
133
134
-
- If successful, this method returns 201 Created.
134
+
- If successful, this method returns `201 Created`.
135
135
136
-
Action entity. If machine with the specified ID wasn't found - 404 Not Found.
136
+
-Action entity. If machine with the specified ID wasn't found, you see `404 Not Found`.
0 commit comments