Skip to content

Commit bf0bf13

Browse files
committed
Update run-live-response.md
1 parent 8982e40 commit bf0bf13

File tree

1 file changed

+8
-7
lines changed

1 file changed

+8
-7
lines changed

defender-endpoint/api/run-live-response.md

Lines changed: 8 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -42,13 +42,13 @@ Runs a sequence of live response commands on a device
4242

4343
## Limitations
4444

45-
1. Rate limitations for this API are 10 calls per minute (additional requests are responded with HTTP 429).
45+
1. Rate limitations for this API are 10 calls per minute (more requests are responded with HTTP 429).
4646

4747
2. 25 concurrently running sessions (requests exceeding the throttling limit receives a "429 - Too many requests" response).
4848

4949
3. If the machine isn't available, the session is queued for up to three days.
5050

51-
4. RunScript command timeouts after 10 minutes.
51+
4. RunScript command time-outs after 10 minutes.
5252

5353
5. Live response commands can't be queued up and can only be executed one at a time.
5454

@@ -61,7 +61,7 @@ Runs a sequence of live response commands on a device
6161
8. Multiple live response sessions can't be executed on the same machine (if live response action is already running, subsequent requests are responded to with HTTP 400 - ActiveRequestAlreadyExists).
6262

6363
> [!NOTE]
64-
> Live response actions initiated from the Device page are not available in the machineactions API.
64+
> Live response actions initiated from the Device page aren't available in the `machineactions` API.
6565
6666
## Minimum Requirements
6767

@@ -85,7 +85,7 @@ Before you can initiate a session on a device, make sure you fulfill the followi
8585
- Version 1809 (with [KB4537818](https://support.microsoft.com/help/4537818/windows-10-update-kb4537818))
8686

8787
- **Windows Server 2022**
88-
- **macOS** [(requires additional configuration profiles)](../microsoft-defender-endpoint-mac.md)
88+
- **macOS** [(requires other configuration profiles)](../microsoft-defender-endpoint-mac.md)
8989
- 13 (Ventura)
9090
- 12 (Monterey)
9191
- 11 (Big Sur)
@@ -126,14 +126,14 @@ POST https://api.securitycenter.microsoft.com/API/machines/{machine_id}/runliver
126126
|Command Type|Parameters|Description|
127127
|---|---|---|
128128
|PutFile|Key: FileName <p> Value: \<file name\>|Puts a file from the library to the device. Files are saved in a working folder and are deleted when the device restarts by default. NOTE: Doesn't have a response result. |
129-
|RunScript|Key: ScriptName <br> Value: \<Script from library\> <p> Key: Args <br> Value: \<Script arguments\>|Runs a script from the library on a device. <p> The Args parameter is passed to your script. <p> Timeouts after 10 minutes.|
129+
|RunScript|Key: ScriptName <br> Value: \<Script from library\> <p> Key: Args <br> Value: \<Script arguments\>|Runs a script from the library on a device. <p> The Args parameter is passed to your script. <p> Time-outs after 10 minutes.|
130130
|GetFile|Key: Path <br> Value: \<File path\>|Collect file from a device. NOTE: Backslashes in path must be escaped.|
131131

132132
## Response
133133

134-
- If successful, this method returns 201 Created.
134+
- If successful, this method returns `201 Created`.
135135

136-
Action entity. If machine with the specified ID wasn't found - 404 Not Found.
136+
- Action entity. If machine with the specified ID wasn't found, you see `404 Not Found`.
137137

138138
## Example
139139

@@ -242,4 +242,5 @@ Content-type: application/json
242242
- [Get machine action API](get-machineaction-object.md)
243243
- [Get live response result](get-live-response-result.md)
244244
- [Cancel machine action](cancel-machine-action.md)
245+
245246
[!INCLUDE [Microsoft Defender for Endpoint Tech Community](../../includes/defender-mde-techcommunity.md)]

0 commit comments

Comments
 (0)