api

Microsoft Defender for Endpoint APIs

Microsoft Defender for Endpoint APIs expose endpoint alerts, devices, machine actions, indicators, vulnerability management, software inventory, recommendations, scores, remediation tasks, files, users, and advanced query operations.

apisCurrent

Relationships

DeviceProcessEvents
Exposed tabletableDeviceEvents
Exposed tabletableDeviceFileEvents
Exposed tabletableDeviceNetworkEvents
Exposed tabletableDeviceRegistryEvents
Exposed tabletableDeviceLogonEvents
Exposed tabletableDeviceImageLoadEvents
Exposed tabletableDeviceInfo
Exposed tabletable

Example Request

http
GET https://api.security.microsoft.com/api/machines
Authorization: Bearer <token>

GET https://api.security.microsoft.com/api/alerts
Authorization: Bearer <token>