Adaptive Attack Protection API

We have added new operations to the Endpoint API that let you activate or deactivate "Adaptive Attack Protection" on a device. This setting applies more aggressive protection while investigating suspicious activity and is ideal for scenarios where fully isolating the device from the network may cause significant operational disruption to your organization. You can also extend the time that Adaptive Attack Protection is activated on a device to give you more time to complete an investigation. See the product documentation for more details about about Adaptive Attack Protection feature.