Security Graph API beta securityAction

[oferdit]

Hi guys,

I see the that Microsoft has a new Graph API (beta) that handles security actions. what are those security actions? are they vendor specific? what're the available action? should I purchase a product in order to have those actions available?

Thanks,

[#2 · Accepted solution]

Microsoft Graph Security API securityAction enables you to programmatically take action to respond to immediate threats. These actions are provider / vendor specific. Currently blockIP action on Microsoft Defender ATP is supported by the API. The securityAction API is free and if you have Microsoft Defender ATP running in your Azure AD tenant you can use the API to proactively respond to threats by taking actions.