ContraForce Gamebooks for Defender XDR Enterprise Application

This article provides an overview of the Gamebooks for Microsoft Defender XDR enterprise application.

ContraForce API Overview

The Gamebooks for Microsoft Defender XDR enterprise application is used to authorize MDE Gamebook executions that target Endpoint entities. Specifically, quaranting files, scanning devices, and isolating hosts from a network are the supported actions. By default, consent can be granted for this enterprise application with delegated type permissions; however, application type permissions can be consented as well, which allow for ContraForce services to run these gamebook actions in a customer’s tenant without a service provider’s user having to be present in their customer’s tenant.