Microsoft Security Graph API

Microsoft Security Graph API

by Internal Labs

StarStarStarStarStarStarStarStarStarStar

0

Integration Service Connector

Downloads

<100

back button
back button
carouselImage0
next button
next button

Summary

Summary

The Microsoft Graph API for Security connector provides access to Microsoft's advanced threat protection capabilities through the "Advanced Hunting" blade in the Defender Security Portal.

Overview

Overview

The Microsoft Graph API for Security Connector integrates with Microsoft 365 Defender’s Advanced Hunting feature, allowing you to run deep, customizable threat hunting queries from UiPath workflows.

This connector enables organizations to query real-time telemetry and incident data across Microsoft Defender services using Kusto Query Language (KQL), supporting advanced security analytics, investigation and automated response.

Features

Features

Activity included

  1. Run Advanced Threat Hunt Query - This activity allows you to execute a query against the "Advanced Hunting" blade in the Defender Security Portal.

Input

  • Query: The KQL (Kusto Query Language) query to be executed against the Advanced Hunting data.

 

Outputs

  • Columns: An array of strings representing the names of the columns in the query result. 

  • Results: An array of dictionaries, where each dictionary represents a row in the query result. The keys in each dictionary correspond to the column names, and the values are the data for that specific row and column. 

  • Result count: An integer representing the number of rows returned by the query.

 

Similar Listings