From c3fc7ad14302c8cdd7e65a647ed9b601fd43f543 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 9 Apr 2020 16:16:19 -0700 Subject: [PATCH] fixes --- .../microsoft-defender-atp/alerts.md | 7 +++--- .../microsoft-defender-atp/api-explorer.md | 22 ++++++++++++------- 2 files changed, 18 insertions(+), 11 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/alerts.md b/windows/security/threat-protection/microsoft-defender-atp/alerts.md index 62a32da91b..d0fa10c5e9 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/alerts.md @@ -23,6 +23,7 @@ ms.topic: article - Want to experience Microsoft Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) ## Methods + Method |Return Type |Description :---|:---|:--- [Get alert](get-alert-info-by-id.md) | [Alert](alerts.md) | Get a single [alert](alerts.md) object. @@ -37,7 +38,8 @@ Method |Return Type |Description ## Properties -Property | Type | Description + +Property | Type | Description :---|:---|:--- id | String | Alert ID. title | String | Alert title. @@ -61,7 +63,6 @@ threatFamilyName | String | Threat family. machineId | String | ID of a [machine](machine.md) entity that is associated with the alert. comments | List of Alert comments | Alert Comment is an object that contains: comment string, createdBy string and createTime date time. - ### Response example for getting single alert: ``` @@ -73,7 +74,7 @@ GET https://api.securitycenter.windows.com/api/alerts/da637084217856368682_-2929 "id": "da637084217856368682_-292920499", "incidentId": 66860, "investigationId": 4416234, - "investigationState": "Running", + "investigationState": "Running", "assignedTo": "secop@contoso.com", "severity": "Low", "status": "New", diff --git a/windows/security/threat-protection/microsoft-defender-atp/api-explorer.md b/windows/security/threat-protection/microsoft-defender-atp/api-explorer.md index 7558960aa6..891d09df60 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/api-explorer.md +++ b/windows/security/threat-protection/microsoft-defender-atp/api-explorer.md @@ -1,7 +1,7 @@ --- title: API Explorer in Microsoft Defender ATP ms.reviewer: -description: Use the API Explorer to construct and perform API queries, test and send requests for any available API +description: Use the API Explorer to construct and do API queries, test, and send requests for any available API keywords: api, explorer, send, request, get, post, search.product: eADQiWindows 10XVcnh search.appverid: met150 @@ -19,14 +19,16 @@ ms.topic: conceptual --- # API Explorer + **Applies to:** + - [Microsoft Defender Advanced Threat Protection (Windows Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) The Microsoft Defender ATP API Explorer is a tool that helps you explore various Microsoft Defender ATP APIs interactively. -The API Explorer makes it easy to construct and perform API queries, test and send requests for any available Microsoft Defender ATP API endpoint. You can also use the API Explorer to perform actions or find data that might not yet be available through the user interface. +The API Explorer makes it easy to construct and do API queries, test, and send requests for any available Microsoft Defender ATP API endpoint. Use the API Explorer to take actions or find data that might not yet be available through the user interface. -The tool is useful during app development because it allows you to perform API queries that respect your user access settings, reducing the need to generate access tokens. +The tool is useful during app development. It allows you to perform API queries that respect your user access settings, reducing the need to generate access tokens. You can also use the tool to explore the gallery of sample queries, copy result code samples, and generate debug information. @@ -34,26 +36,30 @@ With the API Explorer, you can: - Run requests for any method and see responses in real-time - Quickly browse through the API samples and learn what parameters they support -- Make API calls with ease; no need to authenticate beyond the management portal sign-in +- Make API calls with ease; no need to authenticate beyond the management portal sign in ## Access API Explorer + From the left navigation menu, select **Partners & APIs** > **API Explorer**. -## Supported APIs +## Supported APIs + API Explorer supports all the APIs offered by Microsoft Defender ATP. The list of supported APIs is available in the [APIs documentation](apis-intro.md). ## Get started with the API Explorer + 1. In the left pane, there is a list of sample requests that you can use. 2. Follow the links and click **Run query**. -Some of the samples may require specifying a parameter in the URL, for example, {machine- id}. +Some of the samples may require specifying a parameter in the URL, for example, {machine- ID}. ## FAQ + **Do I need to have an API token to use the API Explorer?**
-Credentials to access an API are not needed since the API Explorer uses the Microsoft Defender ATP management portal token whenever it makes a request. +Credentials to access an API aren't needed. The API Explorer uses the Microsoft Defender ATP management portal token whenever it makes a request. The logged-in user authentication credential is used to verify that the API Explorer is authorized to access data on your behalf. -Specific API requests are limited based on your RBAC privileges; for example, a request to "Submit indicator" is limited to the security admin role. +Specific API requests are limited based on your RBAC privileges. For example, a request to "Submit indicator" is limited to the security admin role.