Skip to content

GraphAPI: Change Endpoint to Graph Security Incidents #96

@Hu6li

Description

@Hu6li

Description:

We need to change the endpoint from graph security alerts to graph security incidents.

Current Endpoint:
graph.microsoft.com/v1.0/security/alerts

Proposed Endpoint:
graph.microsoft.com/v1.0/security/incidents

Reason for Change:

The alerts endpoint lacks a lot of information. Using incidents allows setting the "$expand" option. This, in turn, enables having all important information aggregated in one event. Additionally, "/incidents" always provides a sourceLink.

Question:

Currently, I don't see any easy way of configuring the app to use another endpoint. Do you have any suggestions to solve this problem?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions