Windows Defender ATP API vs Security Graph API

Microsoft Graph Security API enables you to access different entities like alerts, tiIndicators, etc. across multiple security products including Windows Defender ATP using a single programmatic interface and unified schema. Considering integrations with multiple products the goal is to surface entities and information that applies to most of the products so that we can provide enriched correlation capabilities across these different products. Nuanced features like, detailed logs, which is product specific can be accessible directly by querying the product. Scenario based guidance on these is detailed in the building connected security solutions developer guide @ https://aka.ms/securitydevwhitepaper