Exclude Device in Defender for endpoint

In the DfE GUI on security.microsoft.com it is possible to exclude a device manually adding a justification (eg Duplicate device) and additional Notes. Now I'd like to use an API - probably the Win...