api

Microsoft Sentinel REST API

The Microsoft Sentinel REST API manages Sentinel resources such as incidents, analytics rules, data connectors, bookmarks, and entity information.

apisCurrent

Relationships

SecurityIncident
Exposed tabletableSecurityAlert
Exposed tabletableThreatIntelIndicators
Exposed tabletableThreatIntelObjects
Exposed tabletable

Example Request

http
GET https://management.azure.com/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents?api-version=2025-09-01
Authorization: Bearer <token>