Microsoft Secure Tech Accelerator
Apr 03 2024, 07:00 AM - 11:00 AM (PDT)
Microsoft Tech Community

How to get/set defender settings with API

Copper Contributor

Does anyone know if it is possible to retrieve my Defender settings using the API? For example, I need to access:

Microsoft Defender -> Settings -> Endpoints -> General -> Advanced Features

I noticed that the portal uses 'apiproxy/mtp/k8s/mgmt/TenantContext?realTime=true' to obtain all information, and I could see that the API URL being used for it is 'k8s': 'https://wdatpprd-eus3.securitycenter.windows.com/api'.

However, the documentation for the Defender API (https://api.securitycenter.windows.com) does not contain any information regarding settings.

Is it possible to connect to this API (https://wdatpprd-eus3.securitycenter.windows.com/api) from my application? How should I set up API permissions in my Azure tenant (add any scopes or anything else)? Is there any documentation available on how to achieve this?

 

2 Replies

Hi @dmitry_gusev 

 

Did you reach any conclusion? I've been trying to obtain the same information with API calls from API Explorer on security.microsoft.com but it didnt work. 

 

Regards

@antoniocalo18 

No, I haven't. I'm still looking for a solution. If I find one, I'll reply here.