How can i stream "Email" from security.microsoft.com ?

Question

I am trying to stream "Email" from security.microsoft.com -> Settings -> Microsoft 365 Defender -> Streaming API.

However I can only see "Alerts" and "Devices".

Answer 1

Hi Sigma,

The "security.microsoft.com" portal allows streaming for Alerts and Devices but it does not currently support streaming for emails directly. You can however use the Microsoft Graph API to access Email data, including details about messages, folders, and other mail-related data. Here is a link to the Graph API documentation for accessing mail data: Access mail data using Microsoft Graph. Remember that to access mail data, the necessary permissions (like Mail.ReadBasic.All) should be granted in Azure AD. For streaming data, you might need to implement a service that periodically fetches new emails using the API and then processes them as needed. Also, you might want to explore Logic Apps or Power Automate to create workflows that trigger on new emails: Automate tasks by using Office scripts with Power Automate