Updating alerts with "Office 365 Security and Compliance" origin

[Jordi Marchán Martínez]

Hi,

Everytime we want to update an alert from Office 365 Security and Compliance using the graph api it throws a 404 error.

[#2]

@Jordi Marchán Martínez To help investigate this, can you please share more details of the issue? Details such as screenshots of your code and properties you're trying to update would be helpful.

[#3]

@Chi_Nguyen 

REQUEST (USING GET)
-------------------
https://graph.microsoft.com/beta/security/alerts/030addb3-935d-643c-1000-08d7513b9e7b
GET /beta/security/alerts/030addb3-935d-643c-1000-08d7513b9e7b HTTP/1.1

Response
--------
{"@odata.context":"https://graph.microsoft.com/beta/$metadata#Security/alerts/$entity","id":"030addb3-935d-643c-1000-08d7513b9e7b","azureTenantId":"62157828-6c47-4050-9b89-736f3284dbcf","azureSubscriptionId":null,"riskScore":null,"tags":[],"activityGroupName":null,"assignedTo":null,"category":"ThreatManagement","closedDateTime":null,"comments":["New alert"],"confidence":null,"createdDateTime":"2019-10-15T06:49:16.91Z","description":"","detectionIds":[],"eventDateTime":"2019-10-15T06:48:52Z","feedback":null,"lastModifiedDateTime":"2019-10-15T06:50:02.79Z","recommendedActions":[],"severity":"medium","sourceMaterials":[],"status":"newAlert","title":"suplantaci\u00f3n de correo entrante","vendorInformation":{"provider":"Office 365 Security and Compliance","providerVersion":null,"subProvider":null,"vendor":"Microsoft"},"cloudAppStates":[],"fileStates":[],"hostStates":[],"historyStates":[],"malwareStates":[{"category":null,"family":"8e9a84f9-2414-4141-5ffd-08d7513b6105-17117474914910872842-1","name":null,"severity":null,"wasRunning":null},{"category":null,"family":"8e9a84f9-2414-4141-5ffd-08d7513b6105-5236104132133982524-1","name":null,"severity":null,"wasRunning":null},{"category":null,"family":"8e9a84f9-2414-4141-5ffd-08d7513b6105-5492388134699725882-1","name":null,"severity":null,"wasRunning":null},{"category":null,"family":"8e9a84f9-2414-4141-5ffd-08d7513b6105-6368568859208255277-1","name":null,"severity":null,"wasRunning":null},{"category":null,"family":"8e9a84f9-2414-4141-5ffd-08d7513b6105-6948498511391702696-1","name":null,"severity":null,"wasRunning":null},{"category":null,"family":"8e9a84f9-2414-4141-5ffd-08d7513b6105-7505023705075605084-1","name":null,"severity":null,"wasRunning":null}],"networkConnections":[],"processes":[],"registryKeyStates":[],"triggers":[],"userStates":[],"vulnerabilityStates":[]}


REQUEST (USING PATCH)
---------------------
https://graph.microsoft.com/beta/security/alerts/030addb3-935d-643c-1000-08d7513b9e7b
PATCH /beta/security/alerts/030addb3-935d-643c-1000-08d7513b9e7b
{"assignedTo":"1ded86ec-7868-42e8-b94d-75c175d522b8","comments":["Test comment"],"feedback":"falsePositive","status":"resolved","vendorInformation":{"provider":"Office 365 Security and Compliance","providerVersion":null,"subProvider":null,"vendor":"Microsoft"}}

Response
--------
HTTP/1.1 404 Not Found
{
"error": {
"code": "NotFound",
"message": "The requested resource was not found.",
"innerError": {
"request-id": "aaedc16e-ce8d-480b-93cc-0cb459672b25",
"date": "2019-10-15T09:21:15"
}
}
}

[#4]

@Jordi Marchán Martínez Patch alert for Office 365 currently isn't currently supported, and we are working with Office security provider to help land this. You can follow this Github issue to keep posted on its status. Thanks.