security resource type

Namespace: microsoft.graph

The security resource is the entry point for the Security object model. It returns a singleton security resource. It doesn't contain any usable properties.

Methods

Method Return Type Description
Run hunting query microsoft.graph.security.huntingQueryResults Queries a specified set of event, activity, or entity data supported by Microsoft 365 Defender to proactively look for specific threats in your environment.

Properties

None

Relationships

Relationship Type Description
alerts alert collection Read-only. Nullable.
alerts_v2 microsoft.graph.security.alert collection A collection of alerts in Microsoft 365 Defender.
identities microsoft.graph.security.identityContainer A container for security identities APIs.
incidents microsoft.graph.security.incident collection A collection of incidents in Microsoft 365 Defender, each of which is a set of correlated alerts and associated metadata that reflects the story of an attack.

JSON representation

The following JSON representation shows the resource type.

{
}

Example

The security resource is available at the root of the graph.

GET https://graph.microsoft.com/v1.0/security
HTTP/1.1 200 OK
Content-type: application/json

{
}