Forum Discussion
Updating alerts with "Office 365 Security and Compliance" origin
Hi,
Everytime we want to update an alert from Office 365 Security and Compliance using the graph api it throws a 404 error.
3 Replies
Jordi Marchán Martínez To help investigate this, can you please share more details of the issue? Details such as screenshots of your code and properties you're trying to update would be helpful.
REQUEST (USING GET) ------------------- https://graph.microsoft.com/beta/security/alerts/030addb3-935d-643c-1000-08d7513b9e7b GET /beta/security/alerts/030addb3-935d-643c-1000-08d7513b9e7b HTTP/1.1 Response -------- {"@odata.context":"https://graph.microsoft.com/beta/$metadata#Security/alerts/$entity","id":"030addb3-935d-643c-1000-08d7513b9e7b","azureTenantId":"62157828-6c47-4050-9b89-736f3284dbcf","azureSubscriptionId":null,"riskScore":null,"tags":[],"activityGroupName":null,"assignedTo":null,"category":"ThreatManagement","closedDateTime":null,"comments":["New alert"],"confidence":null,"createdDateTime":"2019-10-15T06:49:16.91Z","description":"","detectionIds":[],"eventDateTime":"2019-10-15T06:48:52Z","feedback":null,"lastModifiedDateTime":"2019-10-15T06:50:02.79Z","recommendedActions":[],"severity":"medium","sourceMaterials":[],"status":"newAlert","title":"suplantaci\u00f3n de correo entrante","vendorInformation":{"provider":"Office 365 Security and Compliance","providerVersion":null,"subProvider":null,"vendor":"Microsoft"},"cloudAppStates":[],"fileStates":[],"hostStates":[],"historyStates":[],"malwareStates":[{"category":null,"family":"8e9a84f9-2414-4141-5ffd-08d7513b6105-17117474914910872842-1","name":null,"severity":null,"wasRunning":null},{"category":null,"family":"8e9a84f9-2414-4141-5ffd-08d7513b6105-5236104132133982524-1","name":null,"severity":null,"wasRunning":null},{"category":null,"family":"8e9a84f9-2414-4141-5ffd-08d7513b6105-5492388134699725882-1","name":null,"severity":null,"wasRunning":null},{"category":null,"family":"8e9a84f9-2414-4141-5ffd-08d7513b6105-6368568859208255277-1","name":null,"severity":null,"wasRunning":null},{"category":null,"family":"8e9a84f9-2414-4141-5ffd-08d7513b6105-6948498511391702696-1","name":null,"severity":null,"wasRunning":null},{"category":null,"family":"8e9a84f9-2414-4141-5ffd-08d7513b6105-7505023705075605084-1","name":null,"severity":null,"wasRunning":null}],"networkConnections":[],"processes":[],"registryKeyStates":[],"triggers":[],"userStates":[],"vulnerabilityStates":[]} REQUEST (USING PATCH) --------------------- https://graph.microsoft.com/beta/security/alerts/030addb3-935d-643c-1000-08d7513b9e7b PATCH /beta/security/alerts/030addb3-935d-643c-1000-08d7513b9e7b {"assignedTo":"1ded86ec-7868-42e8-b94d-75c175d522b8","comments":["Test comment"],"feedback":"falsePositive","status":"resolved","vendorInformation":{"provider":"Office 365 Security and Compliance","providerVersion":null,"subProvider":null,"vendor":"Microsoft"}} Response -------- HTTP/1.1 404 Not Found { "error": { "code": "NotFound", "message": "The requested resource was not found.", "innerError": { "request-id": "aaedc16e-ce8d-480b-93cc-0cb459672b25", "date": "2019-10-15T09:21:15" } } }Jordi Marchán Martínez Patch alert for Office 365 currently isn't currently supported, and we are working with Office security provider to help land this. You can follow this Github issue to keep posted on its status. Thanks.
