defender_get_machine_action_by_id
Retrieve a specific Microsoft Defender machine action by its ID to check its type, status, requestor, comment, and timestamps. Use it to poll and verify the outcome of a response action.
Instructions
Get one machine action: type, status (Pending, InProgress, Succeeded, Failed, TimeOut, Cancelled), requestor, comment and times. Poll it after a response action.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| action_id | Yes | The machine action ID. |