Forum Discussion
Security Graph API beta securityAction
Hi guys,
I see the that Microsoft has a new https://docs.microsoft.com/en-us/graph/api/resources/securityaction?view=graph-rest-beta that handles security actions. what are those security actions? are they vendor specific? what're the available action? should I purchase a product in order to have those actions available?
Thanks,
Microsoft Graph Security API securityAction enables you to programmatically take action to respond to immediate threats. These actions are provider / vendor specific. Currently blockIP action on Microsoft Defender ATP is supported by the API. The securityAction API is free and if you have Microsoft Defender ATP running in your Azure AD tenant you can use the API to proactively respond to threats by taking actions.
1 Reply
- Preeti_Krishna
Microsoft
Microsoft Graph Security API securityAction enables you to programmatically take action to respond to immediate threats. These actions are provider / vendor specific. Currently blockIP action on Microsoft Defender ATP is supported by the API. The securityAction API is free and if you have Microsoft Defender ATP running in your Azure AD tenant you can use the API to proactively respond to threats by taking actions.