Inquiry About Accessing Multi-Tenant Alerts and Incidents via API
I am currently working on integrating Microsoft Defender with our system and have encountered an issue. In the Multi-Tenant Management portal, I can view multi-tenant alerts and incidents without any problems. However, I am unable to access the same information through the Graph API or any other API.
I have created an app registration in my Azure tenancy as a multi-tenant application, and use this to call the Graph API alerts and incidents, however only information from one tenant is returned, rather than multi-tenant.
Could you please clarify if there's a specific API, such as the Graph API or a dedicated Defender API, that allows querying multi-tenant alerts and incidents?