{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "#/components/schemas/microsoft.graph.security.fileEvidence",
  "title": "microsoft.graph.security.fileEvidence",
  "allOf": [
    {
      "$ref": "#/components/schemas/microsoft.graph.security.alertEvidence"
    },
    {
      "title": "fileEvidence",
      "required": [
        "@odata.type"
      ],
      "type": "object",
      "properties": {
        "detectionStatus": {
          "anyOf": [
            {
              "$ref": "#/components/schemas/microsoft.graph.security.detectionStatus"
            },
            {
              "type": "object",
              "nullable": true
            }
          ],
          "description": "The status of the detection.The possible values are: detected, blocked, prevented, unknownFutureValue."
        },
        "fileDetails": {
          "anyOf": [
            {
              "$ref": "#/components/schemas/microsoft.graph.security.fileDetails"
            },
            {
              "type": "object",
              "nullable": true
            }
          ],
          "description": "The file details."
        },
        "mdeDeviceId": {
          "type": "string",
          "description": "A unique identifier assigned to a device by Microsoft Defender for Endpoint.",
          "nullable": true
        },
        "@odata.type": {
          "type": "string",
          "default": "#microsoft.graph.security.fileEvidence"
        }
      }
    }
  ],
  "x-ms-discriminator-value": "#microsoft.graph.security.fileEvidence"
}