2019-02-12 14:56:36 -08:00

1.8 KiB

title, description, keywords, search.product, ms.prod, ms.mktglfcycl, ms.sitesec, ms.pagetype, ms.author, author, ms.localizationpriority, manager, audience, ms.collection, ms.topic, ms.date
title description keywords search.product ms.prod ms.mktglfcycl ms.sitesec ms.pagetype ms.author author ms.localizationpriority manager audience ms.collection ms.topic ms.date
Use the Windows Defender Advanced Threat Protection APIs Use the exposed data and actions using a set of progammatic APIs that are part of the Microsoft Intelligence Security Graph. apis, graph api, supported apis, actor, alerts, machine, user, domain, ip, file eADQiWindows 10XVcnh w10 deploy library security macapara mjcaparas medium dansimp ITPro M365-security-compliance conceptual 11/28/2018

Use the Windows Defender ATP exposed APIs

Applies to:

  • Windows Defender Advanced Threat Protection (Windows Defender ATP)

In this section

Topic Description
Create your app Learn how to create an application to get programmatical access to Windows Defender ATP on behalf of a user or without a user.
Supported Windows Defender ATP APIs Learn more about the individual supported entities where you can run API calls to and details such as HTTP request values, request headers and expected responses. Examples include APIs for alert resource type, domain related alerts, or even actions such as isolate machine.
How to use APIs - Samples Learn how to use Advanced hunting APIs and multiple APIs such as PowerShell. Other examples include schedule advanced hunting using Microsoft Flow or OData queries.