How to get/set defender settings with API

[dmitry_gusev]

Does anyone know if it is possible to retrieve my Defender settings using the API? For example, I need to access:

Microsoft Defender -> Settings -> Endpoints -> General -> Advanced Features

I noticed that the portal uses 'apiproxy/mtp/k8s/mgmt/TenantContext?realTime=true' to obtain all information, and I could see that the API URL being used for it is 'k8s': 'https://wdatpprd-eus3.securitycenter.windows.com/api'.

However, the documentation for the Defender API (https://api.securitycenter.windows.com) does not contain any information regarding settings.

Is it possible to connect to this API (https://wdatpprd-eus3.securitycenter.windows.com/api) from my application? How should I set up API permissions in my Azure tenant (add any scopes or anything else)? Is there any documentation available on how to achieve this?

[#2]

Hi @dmitry_gusev 

Did you reach any conclusion? I've been trying to obtain the same information with API calls from API Explorer on security.microsoft.com but it didnt work. 

Regards

[#3]

@antoniocalo18 

No, I haven't. I'm still looking for a solution. If I find one, I'll reply here.

[#4]

Hello,

This is currently not supported.

List of supported MDE APIs: https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/api/exposed-apis-list?vie...

List of supported Microsoft Defender XDR APIs: https://learn.microsoft.com/en-us/microsoft-365/security/defender/api-supported?view=o365-worldwide