Microsoft 365 Defender

This app integrates with Microsoft 365 Defender to execute various generic and investigative actions

Supported Actions

• test connectivity: test connectivity
• on poll: on poll
• list alerts: Get the list of recent alerts
• get alert: Retrieve the properties and relationships of an alert object
• list incidents: Get the list of recent incidents
• get incident: Retrieve the properties and relationships of an incident object
• make request: make request
• run query: An advanced search query
• update alert: Update the properties of an alert object
• update incident: Update the properties of an incident object