Microsoft Graph deviceManagement.windowsMalwareInformation API

openapi: 3.2.0
info:
  title: Microsoft Graph Admin Admin.admin Device Management.windows Malware Information API
  description: 'Microsoft Graph API for managing administrative resources in Microsoft Entra ID.

    This API enables administrators to manage Microsoft Edge browser settings, Internet Explorer mode configurations,

    site lists, shared browser sites, Microsoft 365 Apps installation options, people insights, service announcements,

    SharePoint settings, Copilot administration, directory administrative units, and admin consent policies.'
  version: 1.0.0
  contact:
    name: Microsoft Graph API Support
    url: https://developer.microsoft.com/graph
servers:
- url: https://graph.microsoft.com/v1.0
  description: Microsoft Graph API v1.0 endpoint
tags:
- name: deviceManagement.windowsMalwareInformation
paths:
  /deviceManagement/windowsMalwareInformation:
    description: Provides operations to manage the windowsMalwareInformation property of the microsoft.graph.deviceManagement entity.
    get:
      tags:
      - deviceManagement.windowsMalwareInformation
      summary: Microsoft Graph Get windowsMalwareInformation from deviceManagement
      description: The list of affected malware in the tenant.
      operationId: deviceManagement.ListWindowsMalwareInformation
      parameters:
      - $ref: '#/components/parameters/top'
      - $ref: '#/components/parameters/skip'
      - $ref: '#/components/parameters/search'
      - $ref: '#/components/parameters/filter'
      - $ref: '#/components/parameters/count'
      - name: $orderby
        in: query
        description: Order items by property values
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - name: $select
        in: query
        description: Select properties to be returned
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - name: $expand
        in: query
        description: Expand related entities
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      responses:
        2XX:
          $ref: '#/components/responses/microsoft.graph.windowsMalwareInformationCollectionResponse'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-pageable:
        nextLinkName: '@odata.nextLink'
        operationName: listMore
      x-ms-docs-operation-type: operation
    post:
      tags:
      - deviceManagement.windowsMalwareInformation
      summary: Microsoft Graph Create new navigation property to windowsMalwareInformation for deviceManagement
      operationId: deviceManagement.CreateWindowsMalwareInformation
      requestBody:
        description: New navigation property
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/microsoft.graph.windowsMalwareInformation'
        required: true
      responses:
        2XX:
          description: Created navigation property.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.windowsMalwareInformation'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
  /deviceManagement/windowsMalwareInformation/{windowsMalwareInformation-id}:
    description: Provides operations to manage the windowsMalwareInformation property of the microsoft.graph.deviceManagement entity.
    parameters:
    - name: windowsMalwareInformation-id
      in: path
      description: The unique identifier of windowsMalwareInformation
      required: true
      schema:
        type: string
      x-ms-docs-key-type: windowsMalwareInformation
    get:
      tags:
      - deviceManagement.windowsMalwareInformation
      summary: Microsoft Graph Get windowsMalwareInformation from deviceManagement
      description: The list of affected malware in the tenant.
      operationId: deviceManagement.GetWindowsMalwareInformation
      parameters:
      - name: $select
        in: query
        description: Select properties to be returned
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - name: $expand
        in: query
        description: Expand related entities
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      responses:
        2XX:
          description: Retrieved navigation property
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.windowsMalwareInformation'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
    patch:
      tags:
      - deviceManagement.windowsMalwareInformation
      summary: Microsoft Graph Update the navigation property windowsMalwareInformation in deviceManagement
      operationId: deviceManagement.UpdateWindowsMalwareInformation
      requestBody:
        description: New navigation property values
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/microsoft.graph.windowsMalwareInformation'
        required: true
      responses:
        2XX:
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.windowsMalwareInformation'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
    delete:
      tags:
      - deviceManagement.windowsMalwareInformation
      summary: Microsoft Graph Delete navigation property windowsMalwareInformation for deviceManagement
      operationId: deviceManagement.DeleteWindowsMalwareInformation
      parameters:
      - name: If-Match
        in: header
        description: ETag
        schema:
          type: string
      responses:
        '204':
          description: Success
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
  /deviceManagement/windowsMalwareInformation/{windowsMalwareInformation-id}/deviceMalwareStates:
    description: Provides operations to manage the deviceMalwareStates property of the microsoft.graph.windowsMalwareInformation entity.
    parameters:
    - name: windowsMalwareInformation-id
      in: path
      description: The unique identifier of windowsMalwareInformation
      required: true
      schema:
        type: string
      x-ms-docs-key-type: windowsMalwareInformation
    get:
      tags:
      - deviceManagement.windowsMalwareInformation
      summary: Microsoft Graph Get deviceMalwareStates from deviceManagement
      description: List of devices affected by current malware with the malware state on each device
      operationId: deviceManagement.windowsMalwareInformation.ListDeviceMalwareStates
      parameters:
      - $ref: '#/components/parameters/top'
      - $ref: '#/components/parameters/skip'
      - $ref: '#/components/parameters/search'
      - $ref: '#/components/parameters/filter'
      - $ref: '#/components/parameters/count'
      - name: $orderby
        in: query
        description: Order items by property values
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - name: $select
        in: query
        description: Select properties to be returned
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - name: $expand
        in: query
        description: Expand related entities
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      responses:
        2XX:
          $ref: '#/components/responses/microsoft.graph.malwareStateForWindowsDeviceCollectionResponse'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-pageable:
        nextLinkName: '@odata.nextLink'
        operationName: listMore
      x-ms-docs-operation-type: operation
    post:
      tags:
      - deviceManagement.windowsMalwareInformation
      summary: Microsoft Graph Create new navigation property to deviceMalwareStates for deviceManagement
      operationId: deviceManagement.windowsMalwareInformation.CreateDeviceMalwareStates
      requestBody:
        description: New navigation property
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/microsoft.graph.malwareStateForWindowsDevice'
        required: true
      responses:
        2XX:
          description: Created navigation property.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.malwareStateForWindowsDevice'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
  ? /deviceManagement/windowsMalwareInformation/{windowsMalwareInformation-id}/deviceMalwareStates/{malwareStateForWindowsDevice-id}
  : description: Provides operations to manage the deviceMalwareStates property of the microsoft.graph.windowsMalwareInformation entity.
    parameters:
    - name: windowsMalwareInformation-id
      in: path
      description: The unique identifier of windowsMalwareInformation
      required: true
      schema:
        type: string
      x-ms-docs-key-type: windowsMalwareInformation
    - name: malwareStateForWindowsDevice-id
      in: path
      description: The unique identifier of malwareStateForWindowsDevice
      required: true
      schema:
        type: string
      x-ms-docs-key-type: malwareStateForWindowsDevice
    get:
      tags:
      - deviceManagement.windowsMalwareInformation
      summary: Microsoft Graph Get deviceMalwareStates from deviceManagement
      description: List of devices affected by current malware with the malware state on each device
      operationId: deviceManagement.windowsMalwareInformation.GetDeviceMalwareStates
      parameters:
      - name: $select
        in: query
        description: Select properties to be returned
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - name: $expand
        in: query
        description: Expand related entities
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      responses:
        2XX:
          description: Retrieved navigation property
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.malwareStateForWindowsDevice'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
    patch:
      tags:
      - deviceManagement.windowsMalwareInformation
      summary: Microsoft Graph Update the navigation property deviceMalwareStates in deviceManagement
      operationId: deviceManagement.windowsMalwareInformation.UpdateDeviceMalwareStates
      requestBody:
        description: New navigation property values
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/microsoft.graph.malwareStateForWindowsDevice'
        required: true
      responses:
        2XX:
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.malwareStateForWindowsDevice'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
    delete:
      tags:
      - deviceManagement.windowsMalwareInformation
      summary: Microsoft Graph Delete navigation property deviceMalwareStates for deviceManagement
      operationId: deviceManagement.windowsMalwareInformation.DeleteDeviceMalwareStates
      parameters:
      - name: If-Match
        in: header
        description: ETag
        schema:
          type: string
      responses:
        '204':
          description: Success
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
  /deviceManagement/windowsMalwareInformation/{windowsMalwareInformation-id}/deviceMalwareStates/$count:
    description: Provides operations to count the resources in the collection.
    parameters:
    - name: windowsMalwareInformation-id
      in: path
      description: The unique identifier of windowsMalwareInformation
      required: true
      schema:
        type: string
      x-ms-docs-key-type: windowsMalwareInformation
    get:
      tags:
      - deviceManagement.windowsMalwareInformation
      summary: Microsoft Graph Get the number of the resource
      operationId: deviceManagement.windowsMalwareInformation.deviceMalwareStates.GetCount-bf2c
      parameters:
      - $ref: '#/components/parameters/search'
      - $ref: '#/components/parameters/filter'
      responses:
        2XX:
          $ref: '#/components/responses/ODataCountResponse'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
  /deviceManagement/windowsMalwareInformation/$count:
    description: Provides operations to count the resources in the collection.
    get:
      tags:
      - deviceManagement.windowsMalwareInformation
      summary: Microsoft Graph Get the number of the resource
      operationId: deviceManagement.windowsMalwareInformation.GetCount-3d28
      parameters:
      - $ref: '#/components/parameters/search'
      - $ref: '#/components/parameters/filter'
      responses:
        2XX:
          $ref: '#/components/responses/ODataCountResponse'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
components:
  schemas:
    ODataCountResponse:
      type: integer
      format: int32
    microsoft.graph.ODataErrors.ErrorDetails:
      required:
      - code
      - message
      type: object
      properties:
        code:
          type: string
        message:
          type: string
        target:
          type: string
          nullable: true
    microsoft.graph.windowsMalwareSeverity:
      title: windowsMalwareSeverity
      enum:
      - unknown
      - low
      - moderate
      - high
      - severe
      type: string
      description: Malware severity
      x-ms-enum:
        name: windowsMalwareSeverity
        modelAsString: false
        values:
        - value: unknown
          description: Unknown
          name: unknown
        - value: low
          description: Low
          name: low
        - value: moderate
          description: Moderate
          name: moderate
        - value: high
          description: High
          name: high
        - value: severe
          description: Severe
          name: severe
    microsoft.graph.windowsMalwareThreatState:
      title: windowsMalwareThreatState
      enum:
      - active
      - actionFailed
      - manualStepsRequired
      - fullScanRequired
      - rebootRequired
      - remediatedWithNonCriticalFailures
      - quarantined
      - removed
      - cleaned
      - allowed
      - noStatusCleared
      type: string
      description: Malware threat status
      x-ms-enum:
        name: windowsMalwareThreatState
        modelAsString: false
        values:
        - value: active
          description: Active
          name: active
        - value: actionFailed
          description: Action failed
          name: actionFailed
        - value: manualStepsRequired
          description: Manual steps required
          name: manualStepsRequired
        - value: fullScanRequired
          description: Full scan required
          name: fullScanRequired
        - value: rebootRequired
          description: Reboot required
          name: rebootRequired
        - value: remediatedWithNonCriticalFailures
          description: 'Remediated with non critical failures '
          name: remediatedWithNonCriticalFailures
        - value: quarantined
          description: Quarantined
          name: quarantined
        - value: removed
          description: Removed
          name: removed
        - value: cleaned
          description: Cleaned
          name: cleaned
        - value: allowed
          description: Allowed
          name: allowed
        - value: noStatusCleared
          description: No status cleared
          name: noStatusCleared
    microsoft.graph.ODataErrors.InnerError:
      title: InnerError
      required:
      - '@odata.type'
      type: object
      properties:
        request-id:
          type: string
          description: Request Id as tracked internally by the service
          nullable: true
        client-request-id:
          type: string
          description: Client request Id as sent by the client application.
          nullable: true
        date:
          pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
          type: string
          description: Date when the error occured.
          format: date-time
          nullable: true
        '@odata.type':
          type: string
    microsoft.graph.malwareStateForWindowsDeviceCollectionResponse:
      title: Collection of malwareStateForWindowsDevice
      type: object
      allOf:
      - $ref: '#/components/schemas/BaseCollectionPaginationCountResponse'
      - type: object
        properties:
          value:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.malwareStateForWindowsDevice'
    microsoft.graph.windowsMalwareExecutionState:
      title: windowsMalwareExecutionState
      enum:
      - unknown
      - blocked
      - allowed
      - running
      - notRunning
      type: string
      description: Malware execution status
      x-ms-enum:
        name: windowsMalwareExecutionState
        modelAsString: false
        values:
        - value: unknown
          description: Unknown
          name: unknown
        - value: blocked
          description: Blocked
          name: blocked
        - value: allowed
          description: Allowed
          name: allowed
        - value: running
          description: Running
          name: running
        - value: notRunning
          description: Not running
          name: notRunning
    microsoft.graph.malwareStateForWindowsDevice:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.entity'
      - title: malwareStateForWindowsDevice
        required:
        - '@odata.type'
        type: object
        properties:
          detectionCount:
            maximum: 2147483647
            minimum: -2147483648
            type: number
            description: Indicates the number of times the malware is detected
            format: int32
            nullable: true
          deviceName:
            type: string
            description: Indicates the name of the device being evaluated for malware state
            nullable: true
          executionState:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.windowsMalwareExecutionState'
            - type: object
              nullable: true
            description: 'Indicates execution status of the malware. The possible values are: unknown, blocked, allowed, running, notRunning. Defaults to unknown. The possible values are: unknown, blocked, allowed, running, notRunning.'
          initialDetectionDateTime:
            pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
            type: string
            description: Initial detection datetime of the malware
            format: date-time
            nullable: true
          lastStateChangeDateTime:
            pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
            type: string
            description: The last time this particular threat was changed
            format: date-time
            nullable: true
          threatState:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.windowsMalwareThreatState'
            - type: object
              nullable: true
            description: 'Indicates threat status of the malware. The possible values are: active, actionFailed, manualStepsRequired, fullScanRequired, rebootRequired, remediatedWithNonCriticalFailures, quarantined, removed, cleaned, allowed, noStatusCleared. defaults to noStatusCleared. The possible values are: active, actionFailed, manualStepsRequired, fullScanRequired, rebootRequired, remediatedWithNonCriticalFailures, quarantined, removed, cleaned, allowed, noStatusCleared.'
          '@odata.type':
            type: string
        description: Malware state for a windows device
      x-ms-discriminator-value: '#microsoft.graph.malwareStateForWindowsDevice'
    microsoft.graph.windowsMalwareCategory:
      title: windowsMalwareCategory
      enum:
      - invalid
      - adware
      - spyware
      - passwordStealer
      - trojanDownloader
      - worm
      - backdoor
      - remoteAccessTrojan
      - trojan
      - emailFlooder
      - keylogger
      - dialer
      - monitoringSoftware
      - browserModifier
      - cookie
      - browserPlugin
      - aolExploit
      - nuker
      - securityDisabler
      - jokeProgram
      - hostileActiveXControl
      - softwareBundler
      - stealthNotifier
      - settingsModifier
      - toolBar
      - remoteControlSoftware
      - trojanFtp
      - potentialUnwantedSoftware
      - icqExploit
      - trojanTelnet
      - exploit
      - filesharingProgram
      - malwareCreationTool
      - remote_Control_Software
      - tool
      - trojanDenialOfService
      - trojanDropper
      - trojanMassMailer
      - trojanMonitoringSoftware
      - trojanProxyServer
      - virus
      - known
      - unknown
      - spp
      - behavior
      - vulnerability
      - policy
      - enterpriseUnwantedSoftware
      - ransom
      - hipsRule
      type: string
      description: Malware category id
      x-ms-enum:
        name: windowsMalwareCategory
        modelAsString: false
        values:
        - value: invalid
          description: Invalid
          name: invalid
        - value: adware
          description: Adware
          name: adware
        - value: spyware
          description: Spyware
          name: spyware
        - value: passwordStealer
          description: Password stealer
          name: passwordStealer
        - value: trojanDownloader
          description: Trojan downloader
          name: trojanDownloader
        - value: worm
          description: Worm
          name: worm
        - value: backdoor
          description: Backdoor
          name: backdoor
        - value: remoteAccessTrojan
          description: Remote access Trojan
          name: remoteAccessTrojan
        - value: trojan
          description: Trojan
          name: trojan
        - value: emailFlooder
          description: Email flooder
          name: emailFlooder
        - value: keylogger
          description: Keylogger
          name: keylogger
        - value: dialer
          description: Dialer
          name: dialer
        - value: monitoringSoftware
          description: Monitoring software
          name: monitoringSoftware
        - value: browserModifier
          description: Browser modifier
          name: browserModifier
        - value: cookie
          description: Cookie
          name: cookie
        - value: browserPlugin
          description: Browser plugin
          name: browserPlugin
        - value: aolExploit
          description: AOL exploit
          name: aolExploit
        - value: nuker
          description: Nuker
          name: nuker
        - value: securityDisabler
          description: Security disabler
          name: securityDisabler
        - value: jokeProgram
          description: Joke program
          name: jokeProgram
        - value: hostileActiveXControl
          description: Hostile ActiveX control
          name: hostileActiveXControl
        - value: softwareBundler
          description: Software bundler
          name: softwareBundler
        - value: stealthNotifier
          description: Stealth modifier
          name: stealthNotifier
        - value: settingsModifier
          description: Settings modifier
          name: settingsModifier
        - value: toolBar
          description: Toolbar
          name: toolBar
        - value: remoteControlSoftware
          description: Remote control software
          name: remoteControlSoftware
        - value: trojanFtp
          description: Trojan FTP
          name: trojanFtp
        - value: potentialUnwantedSoftware
          description: Potential unwanted software
          name: potentialUnwantedSoftware
        - value: icqExploit
          description: ICQ exploit
          name: icqExploit
        - value: trojanTelnet
          description: Trojan telnet
          name: trojanTelnet
        - value: exploit
          description: Exploit
          name: exploit
        - value: filesharingProgram
          description: File sharing program
          name: filesharingProgram
        - value: malwareCreationTool
          description: Malware creation tool
          name: malwareCreationTool
        - value: remote_Control_Software
          description: Remote control software
          name: remote_Control_Software
        - value: tool
          description: Tool
          name: tool
        - value: trojanDenialOfService
          description: Trojan denial of service
          name: trojanDenialOfService
        - value: trojanDropper
          description: Trojan dropper
          name: trojanDropper
        - value: trojanMassMailer
          description: Trojan mass mailer
          name: trojanMassMailer
        - value: trojanMonitoringSoftware
          description: Trojan monitoring software
          name: trojanMonitoringSoftware
        - value: trojanProxyServer
          description: Trojan proxy server
          name: trojanProxyServer
        - value: virus
          description: Virus
          name: virus
        - value: known
          description: Known
          name: known
        - value: unknown
          description: Unknown
          name: unknown
        - value: spp
          description: SPP
          name: spp
        - value: behavior
          description: Behavior
          name: behavior
        - value: vulnerability
          description: Vulnerability
          name: vulnerability
        - value: policy
          description: Policy
          name: policy
        - value: enterpriseUnwantedSoftware
          description: Enterprise Unwanted Software
          name: enterpriseUnwantedSoftware
        - value: ransom
          description: Ransom
          name: ransom
        - value: hipsRule
          description: HIPS Rule
          name: hipsRule
    microsoft.graph.ODataErrors.MainError:
      required:
      - code
      - message
      type: object
      properties:
        code:
          type: string
        message:
          type: string
          x-ms-primary-error-message: true
        target:
          type: string
          nullable: true
        details:
          type: array
          items:
            $ref: '#/components/schemas/microsoft.graph.ODataErrors.ErrorDetails'
        innerError:
          $ref: '#/components/schemas/microsoft.graph.ODataErrors.InnerError'
    microsoft.graph.windowsMalwareInformation:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.entity'
      - title: windowsMalwareInformation
        required:
        - '@odata.type'
        type: object
        properties:
          additionalInformationUrl:
            type: string
            description: Indicates an informational URL to learn more about the malware
            nullable: true
          category:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.windowsMalwareCategory'
            - type: object
              nullable: true
            description: 'Category of the malware. The possible values are: invalid, adware, spyware, passwordStealer, trojanDownloader, worm, backdoor, remoteAccessTrojan, trojan, emailFlooder, keylogger, dialer, monitoringSoftware, browserModifier, cookie, browserPlugin, aolExploit, nuker, securityDisabler, jokeProgram, hostileActiveXControl, softwareBundler, stealthNotifier, settingsModifier, toolBar, remoteControlSoftware, trojanFtp, potentialUnwantedSoftware, icqExploit, trojanTelnet, exploit, filesharingProgram, malwareCreationTool, remoteControlSoftware, tool, trojanDenialOfService, trojanDropper, trojanMassMailer, trojanMonitoringSoftware, trojanProxyServer, virus, known, unknown, spp, behavior, vulnerability, policy, enterpriseUnwantedSoftware, ransom, hipsRule. default value is invalid. The possible values are: invalid, adware, spyware, passwordStealer, trojanDownloader, worm, backdoor, remoteAccessTrojan, trojan, emailFlooder, keylogger, dialer, monitoringSoftware, browserModifier, cookie, browserPlugin, aolExploit, nuker, securityDisabler, jokeProgram, hostileActiveXControl, softwareBundler, stealthNotifier, settingsModifier, toolBar, remoteControlSoftware, trojanFtp, potentialUnwantedSoftware, icqExploit, trojanTelnet, exploit, filesharingProgram, malwareCreationTool, remoteControlSoftware, tool, trojanDenialOfService, trojanDropper, trojanMassMailer, trojanMonitoringSoftware, trojanProxyServer, virus, known, unknown, spp, behavior, vulnerability, policy, enterpriseUnwantedSoftware, ransom, hipsRule.'
          displayName:
            type: string
            description: Indicates the name of the malware
            nullable: true
          lastDetectionDateTime:
            pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
            type: string
            description: Indicates the last time the malware was detected in UTC
            format: date-time
            nullable: true
          severity:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.windowsMalwareSeverity'
            - type: object
              nullable: true
            description: 'Severity of the malware. The possible values are: unknown, low, moderate, high, severe. default is unknown. The possible values are: unknown, low, moderate, high, severe.'
          deviceMalwareStates:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.malwareStateForWindowsDevice'
            description: List of devices affected by current malware with the malware state on each device
            x-ms-navigationProperty: true
          '@odata.type':
            type: string
        description: Malware information entity.
      x-ms-discriminator-value: '#microsoft.graph.windowsMalwareInformation'
    microsoft.graph.windowsMalwareInformationCollectionResponse:
      title: Collection of windowsMalwareInformation
      type: object
      allOf:
      - $ref: '#/components/schemas/BaseCollectionPaginationCountResponse'
      - type: object
        properties:
          value:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.windowsMalwareInformation'
    

# --- truncated at 32 KB (155 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/microsoft-graph/refs/heads/main/openapi/microsoft-graph-devicemanagement-windowsmalwareinformation-api-openapi.yml