We're looking to block outgoing traffic from a specific client or group, using the Microsoft Defender for Endpoint-app. If we were to implement this ourselves using the MS api, it would be something like: POST https://api.securitycenter.microsoft.com/api/machines/{machineId}/restrict
Authorization: Bearer {your_access_token}
Content-Type: application/json
{
"action": "Block",
"destination": "IP_ADDRESS_OR_DOMAIN",
"protocol": "TCP",
"port": "443"
} However, I haven't been able to find a corresponding call in the app source code. Am I missing something, or isn't this currently supported?
... View more