An API that connects multiple Microsoft services, enabling data access and automation across platforms
Attack Simulator Graph API associate user and their results with a simulation
Mike Baker
16
Reputation points
I can extract the list of Simulations and includedaccounts
https://graph.microsoft.com/v1.0/security/attackSimulation/simulations/<simid>/includedAccountTarget
however we cannot associate the results of a simulation with a user
except if we start looking at latestsimulationdate and match for range within launch date and validity however this gets only the recent simulation - not to mention too much complexity.
what are we missing?
is the Defender portal using API's that are not exposed?
Microsoft Security | Microsoft Graph
Microsoft Security | Microsoft Graph
Sign in to answer