Is it possible to create threat indicator in endpoint(MS 365 Defender) from logic app using Managed identities?

Nafila Afrin 1 Reputation point
2023-03-30T07:44:53.17+00:00

Hi ,

Is it possible to create threat indicator in endpoint(MS 365 Defender) from logic app using Managed identities?

Thanks

Azure Logic Apps
Azure Logic Apps
An Azure service that automates the access and use of data across clouds without writing code.
2,839 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,451 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Andrew Blumhardt 9,491 Reputation points Microsoft Employee
    2023-03-30T22:53:23.32+00:00

    You need to make a direct call to an API like the Graph Security API. There may be some examples in the Sentinel-MDE github.

    https://learn.microsoft.com/en-us/graph/api/resources/tiindicator?view=graph-rest-beta

    0 comments