Software resource type

Applies to:

Want to experience Microsoft Defender for Endpoint? Sign up for a free trial.


If you are a US Government customer, please use the URIs listed in Microsoft Defender for Endpoint for US Government customers.


For better performance, you can use server closer to your geo location:



Some information in this article relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.


Method Return Type Description
List software Software collection List the organizational software inventory
Get software by ID Software Get a specific software by its software ID
List software version distribution Distribution collection List software version distribution by software ID
List machines by software MachineRef collection Retrieve a list of devices that are associated with the software ID
List vulnerabilities by software Vulnerability collection Retrieve a list of vulnerabilities associated with the software ID
Get missing KBs KB collection Get a list of missing KBs associated with the software ID


Property Type Description
id String Software ID
Name String Software name
Vendor String Software publisher name
Weaknesses Long Number of discovered vulnerabilities
publicExploit Boolean Public exploit exists for some of the vulnerabilities
activeAlert Boolean Active alert is associated with this software
exposedMachines Long Number of exposed devices
impactScore Double Exposure score impact of this software


Do you want to learn more? Engage with the Microsoft Security community in our Tech Community: Microsoft Defender for Endpoint Tech Community.