2020-05-21 14:41:24 -07:00

2.6 KiB

title, description, keywords, search.product, ms.prod, ms.mktglfcycl, ms.sitesec, ms.pagetype, ms.author, author, ms.localizationpriority, manager, audience, ms.collection, ms.topic
title description keywords search.product ms.prod ms.mktglfcycl ms.sitesec ms.pagetype ms.author author ms.localizationpriority manager audience ms.collection ms.topic
Get installed software Retrieves a collection of installed software related to a given device ID. apis, graph api, supported apis, get, list, file, information, software inventory, installed software per device, threat & vulnerability management api, mdatp tvm api eADQiWindows 10XVcnh w10 deploy library security dolmont DulceMontemayor medium dansimp ITPro M365-security-compliance article

Get installed software

Applies to:

[!includePrerelease information]

Retrieves a collection of installed software related to a given device ID.

Permissions

One of the following permissions is required to call this API. To learn more, including how to choose permissions, see Use Microsoft Defender ATP APIs

Permission type Permission Permission display name
Application Software.Read.All 'Read Threat and Vulnerability Management Software information'
Delegated (work or school account) Software.Read 'Read Threat and Vulnerability Management Software information'

HTTP request

GET /api/machines/{machineId}/software

Request headers

Name Type Description
Authorization String Bearer {token}. Required.

Request body

Empty

Response

If successful, this method returns 200 OK with the installed software information in the body.

Example

Request

Here is an example of the request.

GET https://api.securitycenter.windows.com/api/machines/ac233fa6208e1579620bf44207c4006ed7cc4501/software

Response

Here is an example of the response.

{
"@odata.context": "https://api.securitycenter.windows.com/api/$metadata#Software",
"value": [
        {
"id": "microsoft-_-internet_explorer",
"name": "internet_explorer",
"vendor": "microsoft",
"weaknesses": 67,
"publicExploit": true,
"activeAlert": false,
"exposedMachines": 42115,
"impactScore": 46.2037163
        }
    ]
}