Hello all,
I am currently gathering some data using Microsoft Graph, taken from the security alerts (https://graph.microsoft.com/v1.0/security/alerts).
I am looking at the alerts that state "Email messages containing phish URLs removed after delivery". If I look at these messages through the O365 portal (https://protection.office.com/viewalerts) and open an alert, I can see the following under details:
By the time this alert was triggered, the following 1 user received Phish and Malicious mail matching the conditions of your alert policy:
I was wondering how to get this bit of data using Graph (or some other method). Anyone have any ideas? The Graph response doesn't appear to show any data regarding who is affected.
