29 questions
1
vote
2
answers
1k
views
Receiving ValidationError when trying to create webhook subscription with Graph API
I am trying to create a subscription in the Graph API, following this documentation. It states that I need to do the following to validate my notification URL:
The client must respond with the ...
- 453
0
votes
1
answer
509
views
Fetch Microsoft Security Alerts for a specific user
I'm trying to use the Microsoft Graph Security API to fetch security alerts for a specific user. It looks like I should be using the filter parameter. But I can't figure out the property to search on. ...
- 278
1
vote
0
answers
127
views
Microsoft Graph Security sample event data, or sample event generator?
I would like to check if anyone is aware of sample events, or built-in native sample event generator, for any of the below integrations?
Azure Security Center
Azure Active Directory Identity ...
- 11
1
vote
0
answers
548
views
Microsoft Graph Security alert get internet message id
What I need:
Get access to the Internet Message Id for an email related incident via the Microsoft Graph Security API
My problem:
I used Outlook's reporting module and marked an email that was in my ...
- 1,141
2
votes
0
answers
708
views
Microsoft Graph - status code 504 - unknown error, after several requests
I have got a celery scheduling requests to many MS Graph resources after a few hours I get, constantly, the following response:
{'error': {'code': 'UnknownError', 'message': '', 'innerError': {'date': ...
- 789
0
votes
0
answers
401
views
Get 404 "The resource could not be found" when call /beta/informationprotection/policy/labels
according to documentation we may use the following endpoints for fetching sensitivity labels:
/me/informationProtection/policy/labels (using delegated permissions)
/informationProtection/policy/...
- 345
0
votes
2
answers
725
views
Throttling of Microsoft Graph threat assessment API
I'm starting to use Microsoft Graph threat assessment API to report Phishing Website URL.
(Ref: https://learn.microsoft.com/en-us/graph/api/informationprotection-post-threatassessmentrequests?view=...
- 1
1
vote
2
answers
829
views
Pull extended properties from Microsoft Graph Security API?
I am trying to pull the base events related to an alert no Sentinel via API, however Graph Security API really doesn't return much. I am unable to see mapped entities or the extended properties.
I'...
- 649
1
vote
1
answer
249
views
Inaccurate Security Graph API Responses
For some odd reason the results that I am getting from the Graph Security API the past two days are inaccurate and I can't for the life of me figure out why.
If I query https://graph.microsoft.com/v1....
0
votes
1
answer
256
views
Pulling Azure Security data into Power BI Desktop using Graph Security API: How to set permissions in Azure AD
I'm attempting to connect the Microsoft Graph Security API Connector to Power BI Desktop. Everything seems to work okay until I try to set 'Application' or advanced 'Delegated' authorizations so I can ...
- 33
0
votes
1
answer
718
views
Ingesting Office 365 Alerts with Graph Security API: Set permissions in Azure AD
I'm trying to help someone to ingest Office 365 Alerts with the Graph Security API. This requires SecurityEvents.ReadAll as minimum permission. The docs mention that the permission setting is done in ...
- 736
0
votes
1
answer
196
views
Unable to update threat intelligence indicator beta endpoint
I have created and pushed indicator to Microsoft Azure Sentinel. I have checked that I can access it using GET request with
https://graph.microsoft.com/beta/security/tiIndicators/{id}
However when ...
0
votes
1
answer
165
views
secureScores endpoint returning None
I am working on Microsoft Graph API (python3). The get_alerts() and get_secure_score_control_profiles() returns results but get_secure_score() is returning 'None'.
The Azure portal shows Secure ...
2
votes
1
answer
269
views
Unexpected results when filtering security alerts by createdDateTime
I'm seeing some unexpected behavior from the Microsoft Graph Security Alerts APIin the Graph API.
When filtering by createdDateTime, when no results are expected, it is returning results for today ...
- 1,377
1
vote
1
answer
192
views
/security/alerts not returning from Azure Identity Protection (IPC)
All our customers now return no data for Azure Identity Protection (IPC). This started wednesday 12th jun. Before that we had alerts on all our customers. Rechecked many tenants against their Azure ...
