security resource type

Namespace: microsoft.graph

The security resource is the entry point for the Security object model. It returns a singleton security resource. It doesn't contain any usable properties.


Method Return Type Description
runHuntingQuery Queries a specified set of event, activity, or entity data supported by Microsoft 365 Defender to proactively look for specific threats in your environment.




Relationship Type Description
alerts alert collection Read-only. Nullable.
alerts_v2 collection A collection of alerts in Microsoft 365 Defender.
incidents collection A collection of incidents in Microsoft 365 Defender, each of which is a set of correlated alerts and associated metadata that reflects the story of an attack.

JSON representation

Here is a JSON representation of the resource.



The security resource is available at the root of the graph.

HTTP/1.1 200 OK
Content-type: application/json