ContraForce Gamebooks for Microsoft Defender XDR Service Principal

This article provides an overview of the Gamebooks for Microsoft Defender XDR Service Principal.

ContraForce API Overview

The Gamebooks for Microsoft Defender XDR service principal is used to authorize MDE Gamebook executions that target Endpoint entities. Specifically, quaranting files, scanning devices, and isolating hosts from a network are the supported actions. By default, consent can be granted for this service principal with delegated type permissions; however, application type permissions can be consented as well, which allow for ContraForce services to run these gamebook actions in a customer’s tenant without a service provider’s user having to be present in their customer’s tenant.