Microsoft Graph Security API results

Panayiotis Mousarris 21 Reputation points
2020-10-02T11:27:41.413+00:00

Hello,

With the Graph Security API /alerts endpoint url, I receive alerts info but some fields are not filled in the response. As an example, in the screenshot there is no value for the field "privateIpAddress".

Is there a reason why some fields never have value, is it a permissions or an API issue?

29911-sample.png

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,261 questions
Accepted answer
  1. Alfredo Revilla - Upwork Top Talent | IAM SWE SWA 27,431 Reputation points
    2020-11-02T22:26:56.977+00:00

    Some properties are “required”, such as alert.id. Other properties, if not explicitly documented, are “optional”, i.e., they are not presented (or be null) when there is no such information.

    For the property privateIpAddress, if the alert provider does not have the information, then that property is skipped or null. The alert only contains information what the alert providers know.

    Let us know if this answer was helpful to you. If so, please remember to mark it as the answer so that others in the community with similar questions can more easily find a solution.

    0 comments

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest