Description:
We need to change the endpoint from graph security alerts to graph security incidents.
Current Endpoint:
graph.microsoft.com/v1.0/security/alerts
Proposed Endpoint:
graph.microsoft.com/v1.0/security/incidents
Reason for Change:
The alerts endpoint lacks a lot of information. Using incidents allows setting the "$expand" option. This, in turn, enables having all important information aggregated in one event. Additionally, "/incidents" always provides a sourceLink.
Question:
Currently, I don't see any easy way of configuring the app to use another endpoint. Do you have any suggestions to solve this problem?