n8n-nodes-msdefender 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Frode Hus
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,83 @@
+# n8n-nodes-msdefender 
+
+[![CI](https://github.com/FrodeHus/n8n-nodes-msdefender/actions/workflows/ci.yml/badge.svg)](https://github.com/FrodeHus/n8n-nodes-msdefender/actions/workflows/ci.yml)
+
+
+This is an n8n community node. It lets you use Microsoft Defender in your n8n workflows.
+
+Microsoft Defender is a comprehensive security solution that helps protect your devices and data from threats.
+This node allows you to interact with the Microsoft Defender API to perform various security operations, such as managing devices, retrieving threat intelligence, and more.
+
+[n8n](https://n8n.io/) is a [fair-code licensed](https://docs.n8n.io/sustainable-use-license/) workflow automation platform.
+
+[Installation](#installation)  
+[Operations](#operations)  
+[Credentials](#credentials)  
+[Compatibility](#compatibility)  
+[Usage](#usage)  
+[Resources](#resources)  
+[Version history](#version-history)  
+
+## Installation
+
+Follow the [installation guide](https://docs.n8n.io/integrations/community-nodes/installation/) in the n8n community nodes documentation.
+
+## Operations
+
+- Advanced Query: Run advanced queries against Microsoft Defender.
+- Machine: Manage and retrieve information about devices.
+  - Add Or Remove Tag For Machine
+  - Find By Tag
+  - Get Many: Retrieve many machines.
+  - Get Security Recommendations For Machine
+  - List Installed Software For Machine
+- Exposure
+  - Get Current Exposure Score
+  - Get Exposure Score By Machine Groups.
+- Machine Actions
+  - Isolate Machine
+  - Release Machine from Isolation
+  - List Machine Actions
+  - Offboard Machine
+  - Cancel Machine Action
+  - Run Antivirus Scan
+- Vulnerability
+  - Get All Vulnerabilities
+  - Get Machines By CVE
+  - Get By Machine And Software
+
+## Credentials
+
+To use this node, you need to set up an Entra ID (Azure AD) application and obtain the necessary credentials to access the Microsoft Defender API.
+
+1. Register an application in the [Azure Portal](https://portal.azure.com/).
+2. Assign the required API permissions to the application for Microsoft Defender.
+    - Application permissions: `AdvancedQuery.Read.All`, `Machine.Read.All`, `Score.Read.All`, `Machine.Isolate`
+3. Grant admin consent for the permissions.
+4. Generate a client secret for the application.
+5. Note down the Application (client) ID, Directory (tenant) ID, and client secret.
+
+![Entra ID App Permissions](/images/app-permissions.png)
+
+When configuring the Microsoft Defender node in n8n, use the following credentials:
+- **Client ID**: The Application (client) ID from your Azure AD application.
+- **Client Secret**: The client secret generated for your Azure AD application.
+- **Access Token URL**: https://login.microsoftonline.com/<your-tenant-id>/oauth2/v2.0/token
+
+
+
+## Compatibility
+
+This node is compatible with latest n8n versions.
+
+## Usage
+
+[Try it out](https://docs.n8n.io/try-it-out/)
+
+## Resources
+
+* [n8n community nodes documentation](https://docs.n8n.io/integrations/#community-nodes)
+
+## Version history
+
+- 0.1.0 Initial release with Advanced Query and Machine operations.

package/dist/credentials/MsdefenderOAuth2Api.credentials.d.ts

@@ -0,0 +1,9 @@
+import type { Icon, ICredentialType, INodeProperties } from 'n8n-workflow';
+export declare class MsdefenderOAuth2Api implements ICredentialType {
+    name: string;
+    extends: string[];
+    displayName: string;
+    icon: Icon;
+    documentationUrl: string;
+    properties: INodeProperties[];
+}

package/dist/credentials/MsdefenderOAuth2Api.credentials.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MsdefenderOAuth2Api = void 0;
+class MsdefenderOAuth2Api {
+    constructor() {
+        this.name = 'msdefenderOAuth2Api';
+        this.extends = ['oAuth2Api'];
+        this.displayName = 'Microsoft Defender OAuth2 API';
+        this.icon = {
+            light: 'file:../icons/ms-defender.svg',
+            dark: 'file:../icons/ms-defender.dark.svg',
+        };
+        this.documentationUrl = 'https://learn.microsoft.com/en-us/entra/identity-platform/v2-oauth2-client-creds-grant-flow';
+        this.properties = [
+            {
+                displayName: 'Grant Type',
+                name: 'grantType',
+                type: 'hidden',
+                default: 'clientCredentials',
+            },
+            {
+                displayName: 'Access Token URL',
+                name: 'accessTokenUrl',
+                type: 'string',
+                default: 'https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token',
+            },
+            {
+                displayName: 'Auth URI Query Parameters',
+                name: 'authQueryParameters',
+                type: 'hidden',
+                default: '',
+            },
+            {
+                displayName: 'Scope',
+                name: 'scope',
+                type: 'hidden',
+                default: 'https://api.securitycenter.microsoft.com/.default',
+            },
+            {
+                displayName: 'Authentication',
+                name: 'authentication',
+                type: 'hidden',
+                default: 'body',
+            },
+        ];
+    }
+}
+exports.MsdefenderOAuth2Api = MsdefenderOAuth2Api;
+//# sourceMappingURL=MsdefenderOAuth2Api.credentials.js.map

package/dist/credentials/MsdefenderOAuth2Api.credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MsdefenderOAuth2Api.credentials.js","sourceRoot":"","sources":["../../credentials/MsdefenderOAuth2Api.credentials.ts"],"names":[],"mappings":";;;AAEA,MAAa,mBAAmB;IAAhC;QACC,SAAI,GAAG,qBAAqB,CAAC;QAE7B,YAAO,GAAG,CAAC,WAAW,CAAC,CAAC;QAExB,gBAAW,GAAG,+BAA+B,CAAC;QAC9C,SAAI,GAAS;YACZ,KAAK,EAAE,+BAA+B;YACtC,IAAI,EAAE,oCAAoC;SAC1C,CAAC;QAGF,qBAAgB,GACf,6FAA6F,CAAC;QAE/F,eAAU,GAAsB;YAC/B;gBACC,WAAW,EAAE,YAAY;gBACzB,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,mBAAmB;aAC5B;YACD;gBACC,WAAW,EAAE,kBAAkB;gBAC/B,IAAI,EAAE,gBAAgB;gBACtB,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,8DAA8D;aACvE;YACD;gBACC,WAAW,EAAE,2BAA2B;gBACxC,IAAI,EAAE,qBAAqB;gBAC3B,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,EAAE;aACX;YACD;gBACC,WAAW,EAAE,OAAO;gBACpB,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,mDAAmD;aAC5D;YACD;gBACC,WAAW,EAAE,gBAAgB;gBAC7B,IAAI,EAAE,gBAAgB;gBACtB,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,MAAM;aACf;SACD,CAAC;IACH,CAAC;CAAA;AA/CD,kDA+CC"}

package/dist/icons/ms-defender.dark.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg"  viewBox="0 0 48 48" width="240px" height="240px"><path fill="#0370c8" d="M24,44c-0.552,0-1-0.448-1-1s0.448-1,1-1V44z"/><path fill="#0f5094" d="M25,43c0,0.552-0.448,1-1,1v-2C24.552,42,25,42.448,25,43z"/><circle cx="42" cy="11" r="1" fill="#0883d9"/><circle cx="6" cy="11" r="1" fill="#33bff0"/><path fill="#0f5094" d="M24,43l0.427,0.907c0,0,15.144-7.9,18.08-19.907H24V43z"/><path fill="#0883d9" d="M43,11l-1-1c-11.122,0-11.278-6-18-6v20h18.507C42.822,22.712,43,21.378,43,20C43,16.856,43,11,43,11	z"/><path fill="#0370c8" d="M24,43l-0.427,0.907c0,0-15.144-7.9-18.08-19.907H24V43z"/><path fill="#33bff0" d="M5,11l1-1c11.122,0,11.278-6,18-6v20H5.493C5.178,22.712,5,21.378,5,20C5,16.856,5,11,5,11z"/></svg>

package/dist/icons/ms-defender.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg"  viewBox="0 0 48 48" width="240px" height="240px"><path fill="#0370c8" d="M24,44c-0.552,0-1-0.448-1-1s0.448-1,1-1V44z"/><path fill="#0f5094" d="M25,43c0,0.552-0.448,1-1,1v-2C24.552,42,25,42.448,25,43z"/><circle cx="42" cy="11" r="1" fill="#0883d9"/><circle cx="6" cy="11" r="1" fill="#33bff0"/><path fill="#0f5094" d="M24,43l0.427,0.907c0,0,15.144-7.9,18.08-19.907H24V43z"/><path fill="#0883d9" d="M43,11l-1-1c-11.122,0-11.278-6-18-6v20h18.507C42.822,22.712,43,21.378,43,20C43,16.856,43,11,43,11	z"/><path fill="#0370c8" d="M24,43l-0.427,0.907c0,0-15.144-7.9-18.08-19.907H24V43z"/><path fill="#33bff0" d="M5,11l1-1c11.122,0,11.278-6,18-6v20H5.493C5.178,22.712,5,21.378,5,20C5,16.856,5,11,5,11z"/></svg>

package/dist/nodes/Msdefender/Msdefender.node.d.ts

@@ -0,0 +1,4 @@
+import { type INodeType, type INodeTypeDescription } from 'n8n-workflow';
+export declare class Msdefender implements INodeType {
+    description: INodeTypeDescription;
+}

package/dist/nodes/Msdefender/Msdefender.node.js

@@ -0,0 +1,99 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Msdefender = void 0;
+const n8n_workflow_1 = require("n8n-workflow");
+const machine_1 = require("./resources/machine");
+const advancedQuery_1 = require("./resources/advancedQuery");
+const exposure_1 = require("./resources/exposure");
+const machineAction_1 = require("./resources/machineAction");
+const vulnerability_1 = require("./vulnerability");
+class Msdefender {
+    constructor() {
+        this.description = {
+            displayName: 'Microsoft Defender API',
+            name: 'msdefender',
+            icon: {
+                light: 'file:../../icons/ms-defender.svg',
+                dark: 'file:../../icons/ms-defender.dark.svg',
+            },
+            group: ['transform'],
+            version: 1,
+            subtitle: '={{$parameter["operation"] + ": " + $parameter["resource"]}}',
+            description: 'Interact with the Microsoft Defender API',
+            defaults: {
+                name: 'Microsoft Defender API',
+            },
+            usableAsTool: true,
+            inputs: [n8n_workflow_1.NodeConnectionTypes.Main],
+            outputs: [n8n_workflow_1.NodeConnectionTypes.Main],
+            credentials: [
+                {
+                    name: 'msdefenderOAuth2Api',
+                    required: true,
+                    displayOptions: {
+                        show: {
+                            authentication: ['oAuth2'],
+                        },
+                    },
+                },
+            ],
+            requestDefaults: {
+                baseURL: 'https://api.securitycenter.microsoft.com/',
+                headers: {
+                    Accept: 'application/json',
+                    'Content-Type': 'application/json',
+                },
+            },
+            properties: [
+                {
+                    displayName: 'Authentication',
+                    name: 'authentication',
+                    type: 'options',
+                    options: [
+                        {
+                            name: 'OAuth2',
+                            value: 'oAuth2',
+                        },
+                    ],
+                    default: 'oAuth2',
+                },
+                {
+                    displayName: 'Resource',
+                    name: 'resource',
+                    type: 'options',
+                    noDataExpression: true,
+                    options: [
+                        {
+                            name: 'Advanced Query',
+                            value: 'advancedQuery',
+                        },
+                        {
+                            name: 'Exposure Score',
+                            value: 'exposure',
+                        },
+                        {
+                            name: 'Machine',
+                            value: 'machine',
+                        },
+                        {
+                            name: 'Machine Action',
+                            value: 'machineAction',
+                        },
+                        {
+                            name: 'Vulnerability',
+                            value: 'vulnerability',
+                        },
+                    ],
+                    default: 'advancedQuery',
+                },
+                ...machine_1.machineDescription,
+                ...advancedQuery_1.advancedQueryDescription,
+                ...exposure_1.exposureDescription,
+                ...machineAction_1.machineActionsDescription,
+                ...vulnerability_1.vulnerabilityDescription,
+            ],
+        };
+    }
+}
+exports.Msdefender = Msdefender;
+//# sourceMappingURL=Msdefender.node.js.map

package/dist/nodes/Msdefender/Msdefender.node.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Msdefender.node.js","sourceRoot":"","sources":["../../../nodes/Msdefender/Msdefender.node.ts"],"names":[],"mappings":";;;AAAA,+CAA8F;AAC9F,iDAAyD;AACzD,6DAAqE;AACrE,mDAA2D;AAC3D,6DAAsE;AACtE,mDAA2D;AAE3D,MAAa,UAAU;IAAvB;QACC,gBAAW,GAAyB;YACnC,WAAW,EAAE,wBAAwB;YACrC,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE;gBACL,KAAK,EAAE,kCAAkC;gBACzC,IAAI,EAAE,uCAAuC;aAC7C;YACD,KAAK,EAAE,CAAC,WAAW,CAAC;YACpB,OAAO,EAAE,CAAC;YACV,QAAQ,EAAE,8DAA8D;YACxE,WAAW,EAAE,0CAA0C;YACvD,QAAQ,EAAE;gBACT,IAAI,EAAE,wBAAwB;aAC9B;YACD,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,CAAC,kCAAmB,CAAC,IAAI,CAAC;YAClC,OAAO,EAAE,CAAC,kCAAmB,CAAC,IAAI,CAAC;YACnC,WAAW,EAAE;gBACZ;oBACC,IAAI,EAAE,qBAAqB;oBAC3B,QAAQ,EAAE,IAAI;oBACd,cAAc,EAAE;wBACf,IAAI,EAAE;4BACL,cAAc,EAAE,CAAC,QAAQ,CAAC;yBAC1B;qBACD;iBACD;aACD;YACD,eAAe,EAAE;gBAChB,OAAO,EAAE,2CAA2C;gBACpD,OAAO,EAAE;oBACR,MAAM,EAAE,kBAAkB;oBAC1B,cAAc,EAAE,kBAAkB;iBAClC;aACD;YACD,UAAU,EAAE;gBACX;oBACC,WAAW,EAAE,gBAAgB;oBAC7B,IAAI,EAAE,gBAAgB;oBACtB,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE;wBACR;4BACC,IAAI,EAAE,QAAQ;4BACd,KAAK,EAAE,QAAQ;yBACf;qBACD;oBACD,OAAO,EAAE,QAAQ;iBACjB;gBACD;oBACC,WAAW,EAAE,UAAU;oBACvB,IAAI,EAAE,UAAU;oBAChB,IAAI,EAAE,SAAS;oBACf,gBAAgB,EAAE,IAAI;oBACtB,OAAO,EAAE;wBACR;4BACC,IAAI,EAAE,gBAAgB;4BACtB,KAAK,EAAE,eAAe;yBACtB;wBACD;4BACC,IAAI,EAAE,gBAAgB;4BACtB,KAAK,EAAE,UAAU;yBACjB;wBACD;4BACC,IAAI,EAAE,SAAS;4BACf,KAAK,EAAE,SAAS;yBAChB;wBACD;4BACC,IAAI,EAAE,gBAAgB;4BACtB,KAAK,EAAE,eAAe;yBACtB;wBACD;4BACC,IAAI,EAAE,eAAe;4BACrB,KAAK,EAAE,eAAe;yBACtB;qBACD;oBACD,OAAO,EAAE,eAAe;iBACxB;gBACD,GAAG,4BAAkB;gBACrB,GAAG,wCAAwB;gBAC3B,GAAG,8BAAmB;gBACtB,GAAG,yCAAyB;gBAC5B,GAAG,wCAAwB;aAC3B;SACD,CAAC;IACH,CAAC;CAAA;AArFD,gCAqFC"}

package/dist/nodes/Msdefender/Msdefender.node.json

@@ -0,0 +1,20 @@
+{
+    "node": "n8n-nodes-msdefender",
+    "nodeVersion": "1.0",
+    "codexVersion": "1.0",
+    "categories": [
+        "Development"
+    ],
+    "resources": {
+        "credentialDocumentation": [
+            {
+                "url": "https://learn.microsoft.com/en-us/entra/identity-platform/v2-oauth2-client-creds-grant-flow"
+            }
+        ],
+        "primaryDocumentation": [
+            {
+                "url": "https://github.com/frodehus/n8n-nodes-msdefender"
+            }
+        ]
+    }
+}

package/dist/nodes/Msdefender/resources/advancedQuery/index.d.ts

@@ -0,0 +1,2 @@
+import type { INodeProperties } from 'n8n-workflow';
+export declare const advancedQueryDescription: INodeProperties[];

package/dist/nodes/Msdefender/resources/advancedQuery/index.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.advancedQueryDescription = void 0;
+const run_1 = require("./run");
+const showOnlyForAdvancedQuery = {
+    resource: ['advancedQuery'],
+};
+exports.advancedQueryDescription = [
+    {
+        displayName: 'Operation',
+        name: 'operation',
+        type: 'options',
+        noDataExpression: true,
+        displayOptions: {
+            show: showOnlyForAdvancedQuery,
+        },
+        options: [
+            {
+                name: 'Run',
+                value: 'run',
+                action: 'Run advanced query',
+                description: 'Run advanced query using KQL',
+                routing: {
+                    request: {
+                        method: 'POST',
+                        url: '/api/advancedqueries/run',
+                    },
+                },
+            },
+        ],
+        default: 'run',
+    },
+    ...run_1.advancedQueryRunDescription,
+];
+//# sourceMappingURL=index.js.map

package/dist/nodes/Msdefender/resources/advancedQuery/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../nodes/Msdefender/resources/advancedQuery/index.ts"],"names":[],"mappings":";;;AACA,+BAAoD;AAEpD,MAAM,wBAAwB,GAAG;IAChC,QAAQ,EAAE,CAAC,eAAe,CAAC;CAC3B,CAAC;AAEW,QAAA,wBAAwB,GAAsB;IAC1D;QACC,WAAW,EAAE,WAAW;QACxB,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,SAAS;QACf,gBAAgB,EAAE,IAAI;QACtB,cAAc,EAAE;YACf,IAAI,EAAE,wBAAwB;SAC9B;QACD,OAAO,EAAE;YACR;gBACC,IAAI,EAAE,KAAK;gBACX,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,oBAAoB;gBAC5B,WAAW,EAAE,8BAA8B;gBAC3C,OAAO,EAAE;oBACR,OAAO,EAAE;wBACR,MAAM,EAAE,MAAM;wBACd,GAAG,EAAE,0BAA0B;qBAC/B;iBACD;aACD;SACD;QACD,OAAO,EAAE,KAAK;KACd;IACD,GAAG,iCAA2B;CAC9B,CAAC"}

package/dist/nodes/Msdefender/resources/advancedQuery/run.d.ts

@@ -0,0 +1,2 @@
+import type { INodeProperties } from 'n8n-workflow';
+export declare const advancedQueryRunDescription: INodeProperties[];

package/dist/nodes/Msdefender/resources/advancedQuery/run.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.advancedQueryRunDescription = void 0;
+const showOnlyForAdvancedQueryRun = {
+    operation: ['run'],
+    resource: ['advancedQuery'],
+};
+exports.advancedQueryRunDescription = [
+    {
+        displayName: 'KQL Query',
+        name: 'kqlQuery',
+        required: true,
+        type: 'string',
+        displayOptions: {
+            show: {
+                ...showOnlyForAdvancedQueryRun,
+            },
+        },
+        default: 'DeviceInfo | take 5',
+        routing: {
+            send: {
+                type: 'body',
+                property: 'Query',
+            },
+        },
+        description: 'KQL query to run',
+    },
+];
+//# sourceMappingURL=run.js.map

package/dist/nodes/Msdefender/resources/advancedQuery/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../../../../nodes/Msdefender/resources/advancedQuery/run.ts"],"names":[],"mappings":";;;AAEA,MAAM,2BAA2B,GAAG;IACnC,SAAS,EAAE,CAAC,KAAK,CAAC;IAClB,QAAQ,EAAE,CAAC,eAAe,CAAC;CAC3B,CAAC;AAEW,QAAA,2BAA2B,GAAsB;IAC7D;QACC,WAAW,EAAE,WAAW;QACxB,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,QAAQ;QACd,cAAc,EAAE;YACf,IAAI,EAAE;gBACL,GAAG,2BAA2B;aAC9B;SACD;QACD,OAAO,EAAE,qBAAqB;QAC9B,OAAO,EAAE;YACR,IAAI,EAAE;gBACL,IAAI,EAAE,MAAM;gBACZ,QAAQ,EAAE,OAAO;aACjB;SACD;QACD,WAAW,EAAE,kBAAkB;KAC/B;CACD,CAAC"}

package/dist/nodes/Msdefender/resources/exposure/index.d.ts

@@ -0,0 +1,2 @@
+import type { INodeProperties } from 'n8n-workflow';
+export declare const exposureDescription: INodeProperties[];

package/dist/nodes/Msdefender/resources/exposure/index.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.exposureDescription = void 0;
+const showOnlyForExposure = {
+    resource: ['exposure'],
+};
+exports.exposureDescription = [
+    {
+        displayName: 'Operation',
+        name: 'operation',
+        type: 'options',
+        noDataExpression: true,
+        displayOptions: {
+            show: showOnlyForExposure,
+        },
+        options: [
+            {
+                name: 'Current Exposure Score',
+                value: 'currentExposureScore',
+                action: 'Get current exposure score',
+                description: 'Get the exposure score',
+                routing: {
+                    request: {
+                        method: 'GET',
+                        url: '/api/exposureScore',
+                    },
+                },
+            },
+            {
+                name: 'Get By Machine Groups',
+                value: 'getByMachineGroups',
+                action: 'Get many exposure scores',
+                description: 'Retrieve exposure scores by machine groups',
+                routing: {
+                    request: {
+                        method: 'GET',
+                        url: '/api/exposureScore/ByMachineGroups',
+                    },
+                },
+            },
+        ],
+        default: 'currentExposureScore',
+    },
+];
+//# sourceMappingURL=index.js.map

package/dist/nodes/Msdefender/resources/exposure/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../nodes/Msdefender/resources/exposure/index.ts"],"names":[],"mappings":";;;AAEA,MAAM,mBAAmB,GAAG;IACxB,QAAQ,EAAE,CAAC,UAAU,CAAC;CACzB,CAAC;AAEW,QAAA,mBAAmB,GAAsB;IACrD;QACC,WAAW,EAAE,WAAW;QACxB,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,SAAS;QACf,gBAAgB,EAAE,IAAI;QACtB,cAAc,EAAE;YACf,IAAI,EAAE,mBAAmB;SACzB;QACD,OAAO,EAAE;YACR;gBACC,IAAI,EAAE,wBAAwB;gBAC9B,KAAK,EAAE,sBAAsB;gBAC7B,MAAM,EAAE,4BAA4B;gBACpC,WAAW,EAAE,wBAAwB;gBACrC,OAAO,EAAE;oBACR,OAAO,EAAE;wBACR,MAAM,EAAE,KAAK;wBACb,GAAG,EAAE,oBAAoB;qBACzB;iBACD;aACD;YACD;gBACC,IAAI,EAAE,uBAAuB;gBAC7B,KAAK,EAAE,oBAAoB;gBAC3B,MAAM,EAAE,0BAA0B;gBAClC,WAAW,EAAE,4CAA4C;gBACzD,OAAO,EAAE;oBACR,OAAO,EAAE;wBACR,MAAM,EAAE,KAAK;wBACb,GAAG,EAAE,oCAAoC;qBACzC;iBACD;aACD;SACD;QACD,OAAO,EAAE,sBAAsB;KAC/B;CACD,CAAC"}

package/dist/nodes/Msdefender/resources/machine/addOrRemoveTag.d.ts

@@ -0,0 +1,2 @@
+import { INodeProperties } from "n8n-workflow";
+export declare const addOrRemoveTagDescription: INodeProperties[];

package/dist/nodes/Msdefender/resources/machine/addOrRemoveTag.js

@@ -0,0 +1,80 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.addOrRemoveTagDescription = void 0;
+const showOnlyForAddOrRemoveTags = {
+    operation: ['addOrRemoveTag'],
+    resource: ['machine'],
+};
+exports.addOrRemoveTagDescription = [
+    {
+        displayName: 'Machine ID',
+        name: 'machineId',
+        type: 'string',
+        displayOptions: {
+            show: {
+                ...showOnlyForAddOrRemoveTags,
+            },
+        },
+        default: '',
+        required: true,
+        description: 'The ID of the machine to add or remove tags for',
+        routing: {
+            request: {
+                method: 'POST',
+                url: '=/api/machines/{{ $parameter.machineId }}/tags',
+            },
+        },
+    },
+    {
+        displayName: 'Tag',
+        name: 'tag',
+        type: 'string',
+        displayOptions: {
+            show: {
+                ...showOnlyForAddOrRemoveTags,
+            },
+        },
+        default: '',
+        required: true,
+        description: 'Tag to add or remove from the machine',
+        routing: {
+            send: {
+                type: 'body',
+                property: 'Value',
+            },
+        },
+    },
+    {
+        displayName: 'Action',
+        name: 'action',
+        type: 'options',
+        displayOptions: {
+            show: {
+                ...showOnlyForAddOrRemoveTags,
+            },
+        },
+        options: [
+            {
+                name: 'Add',
+                action: 'Add tag to machine',
+                value: 'add',
+                description: 'Add the tag to the machine',
+            },
+            {
+                name: 'Remove',
+                action: 'Remove tag from machine',
+                value: 'remove',
+                description: 'Remove the tag from the machine',
+            },
+        ],
+        default: 'add',
+        description: 'Whether to add or remove the tag from the machine',
+        routing: {
+            send: {
+                type: 'body',
+                property: 'Action',
+            },
+        },
+    }
+];
+//# sourceMappingURL=addOrRemoveTag.js.map

package/dist/nodes/Msdefender/resources/machine/addOrRemoveTag.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"addOrRemoveTag.js","sourceRoot":"","sources":["../../../../../nodes/Msdefender/resources/machine/addOrRemoveTag.ts"],"names":[],"mappings":";;;AAEA,MAAM,0BAA0B,GAAG;IAC/B,SAAS,EAAE,CAAC,gBAAgB,CAAC;IAC7B,QAAQ,EAAE,CAAC,SAAS,CAAC;CACxB,CAAC;AAEW,QAAA,yBAAyB,GAAsB;IACxD;QACI,WAAW,EAAE,YAAY;QACzB,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,QAAQ;QACd,cAAc,EAAE;YACZ,IAAI,EAAE;gBACF,GAAG,0BAA0B;aAChC;SACJ;QACD,OAAO,EAAE,EAAE;QACX,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,iDAAiD;QAC9D,OAAO,EAAE;YACL,OAAO,EAAE;gBACL,MAAM,EAAE,MAAM;gBACd,GAAG,EAAE,gDAAgD;aACxD;SACJ;KACJ;IACD;QACI,WAAW,EAAE,KAAK;QAClB,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,QAAQ;QACd,cAAc,EAAE;YACZ,IAAI,EAAE;gBACF,GAAG,0BAA0B;aAChC;SACJ;QACD,OAAO,EAAE,EAAE;QACX,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,uCAAuC;QACpD,OAAO,EAAE;YACL,IAAI,EAAE;gBACF,IAAI,EAAE,MAAM;gBACZ,QAAQ,EAAE,OAAO;aACpB;SACJ;KACJ;IACD;QACI,WAAW,EAAE,QAAQ;QACrB,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,SAAS;QACf,cAAc,EAAE;YACZ,IAAI,EAAE;gBACF,GAAG,0BAA0B;aAChC;SACJ;QACD,OAAO,EAAE;YACL;gBACI,IAAI,EAAE,KAAK;gBACX,MAAM,EAAE,oBAAoB;gBAC5B,KAAK,EAAE,KAAK;gBACZ,WAAW,EAAE,4BAA4B;aAC5C;YACD;gBACI,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,yBAAyB;gBACjC,KAAK,EAAE,QAAQ;gBACf,WAAW,EAAE,iCAAiC;aACjD;SACJ;QACD,OAAO,EAAE,KAAK;QACd,WAAW,EAAE,mDAAmD;QAChE,OAAO,EAAE;YACL,IAAI,EAAE;gBACF,IAAI,EAAE,MAAM;gBACZ,QAAQ,EAAE,QAAQ;aACrB;SACJ;KACJ;CACJ,CAAC"}

package/dist/nodes/Msdefender/resources/machine/findByTag.d.ts

@@ -0,0 +1,2 @@
+import { INodeProperties } from "n8n-workflow";
+export declare const findByTagDescription: INodeProperties[];

package/dist/nodes/Msdefender/resources/machine/findByTag.js

@@ -0,0 +1,47 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.findByTagDescription = void 0;
+const showOnlyForFindByTag = {
+    operation: ['findByTag'],
+    resource: ['machine'],
+};
+exports.findByTagDescription = [
+    {
+        displayName: 'Tag Name',
+        name: 'tagName',
+        type: 'string',
+        displayOptions: {
+            show: {
+                ...showOnlyForFindByTag,
+            },
+        },
+        default: '',
+        required: true,
+        description: 'The name of the tag to find machines by',
+        routing: {
+            request: {
+                method: 'GET',
+                url: '=/api/machines/findByTag/?tag={{ $parameter.tagName }}',
+            },
+        },
+    },
+    {
+        displayName: 'Use StartsWith Filter',
+        name: 'useStartsWithFilter',
+        type: 'boolean',
+        displayOptions: {
+            show: {
+                ...showOnlyForFindByTag,
+            },
+        },
+        default: false,
+        description: 'Whether to use a startsWith filter for the tag name',
+        routing: {
+            send: {
+                type: 'query',
+                property: 'useStartsWithFilter',
+            },
+        },
+    },
+];
+//# sourceMappingURL=findByTag.js.map

package/dist/nodes/Msdefender/resources/machine/findByTag.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"findByTag.js","sourceRoot":"","sources":["../../../../../nodes/Msdefender/resources/machine/findByTag.ts"],"names":[],"mappings":";;;AAEA,MAAM,oBAAoB,GAAG;IACzB,SAAS,EAAE,CAAC,WAAW,CAAC;IACxB,QAAQ,EAAE,CAAC,SAAS,CAAC;CACxB,CAAC;AAEW,QAAA,oBAAoB,GAAsB;IACtD;QACC,WAAW,EAAE,UAAU;QACvB,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,QAAQ;QACd,cAAc,EAAE;YACf,IAAI,EAAE;gBACL,GAAG,oBAAoB;aACvB;SACD;QACD,OAAO,EAAE,EAAE;QACX,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,yCAAyC;QACtD,OAAO,EAAE;YACR,OAAO,EAAE;gBACR,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,wDAAwD;aAC7D;SACD;KACD;IACD;QACC,WAAW,EAAE,uBAAuB;QACpC,IAAI,EAAE,qBAAqB;QAC3B,IAAI,EAAE,SAAS;QACf,cAAc,EAAE;YACf,IAAI,EAAE;gBACL,GAAG,oBAAoB;aACvB;SACD;QACD,OAAO,EAAE,KAAK;QACd,WAAW,EAAE,qDAAqD;QAClE,OAAO,EAAE;YACR,IAAI,EAAE;gBACL,IAAI,EAAE,OAAO;gBACb,QAAQ,EAAE,qBAAqB;aAC/B;SACD;KACD;CACD,CAAC"}

package/dist/nodes/Msdefender/resources/machine/getAll.d.ts

@@ -0,0 +1,2 @@
+import type { INodeProperties } from 'n8n-workflow';
+export declare const getAllMachineDescription: INodeProperties[];