Puts a file from the library to the device. Files are saved in a working folder and are deleted when the device restarts by default.
Doesn’t have a response result.
The following permission is required to run this action:
  • Machine.LiveResponse
External DocumentationTo learn more, visit the Microsoft Defender For Endpoints documentation.

​
Parameters

ParameterDescription
CommentComment to associate with the action.
File NameThe name of the file from the library to put on the machine.
Machine IDThe ID of the machine. Can be obtained using the List Machines action.

​
Workflow Library Example

Put File on Machine with Microsoft Defender for Endpoints and Send Results Via Email
Workflow LibraryPreview this Workflow on desktop