Forum Discussion
Can I get productName in Microsoft Graph API incident response?
When using Microsoft Graph Security API, is it possible to get the productName field directly in the incident response (e.g., from /security/incidents endpoint)? Or is it only available at the alert level via /security/incidents/{id}/alerts?
1 Reply
ckyaloMicrosoft
The incident resource typeincident resource type - Microsoft Graph v1.0 | Microsoft Learn does not include productName as a property. Since an incident is a correlation of multiple alerts that may come from different Defender products, the product origin lives on each individual alert.