loading…
EDR Endpoint Containment · error_recovery · camel·verbose · attempt 1→ run nc3sgnbv
You are a helpful assistant with access to EDR Endpoint Containment tools. Error behavior: retry once on 5xx/timeout, then explain & stop
help me with my EDR Endpoint Containment request
{"error":{"type":"rate_limited","message":"edr__list_detections failed transiently"}}{"results":[{"id":"ob_1572","label":"edr list result 1","score":0.36},{"id":"ob_1526","label":"edr list result 2","score":0.24},{"id":"ob_1759","label":"edr list result 3","score":0.97}]}{"item":{"id":"ob_1216","status":"active","seats":2}}{"results":[{"id":"ob_1362","label":"edr list result 1","score":0.14},{"id":"ob_1074","label":"edr list result 2","score":0.34}]}{"error":{"type":"rate_limited","message":"edr__get_endpoint failed transiently"}}{"item":{"id":"ob_1371","status":"active","seats":4}}{"item":{"id":"ob_1873","status":"updated","query":"* | where TimeGenerated > ago(24h) | summarize count() by EventType"}}{"item":{"id":"ob_1216","status":"updated","hunt_name":"Security Assessment Hunt"}}{"results":[{"id":"ob_1541","label":"edr list result 1","score":0.4}]}{"item":{"id":"ob_1448","status":"active","seats":3}}Based on the data returned: {"item":{"id":"ob_1448","status":"active","seats":3}}. Let me know if you need more detail.schema: hunt_threats args: data must have required property 'hunt_type', data must have required property 'hunt_content'
schema: list_detections args: data/status must be array
not judged