Actions75
- EndpointAutopilot Actions
- TenantAdministrationAlerts Actions
- EndpointMEM Actions
- TenantGDAP Actions
- TenantAdministrationApplicationApproval Actions
- TenantAdministration Actions
- CIPPSetup Actions
- Security Actions
- IdentityAdministrationDevices Actions
- CIPPExtensions Actions
- EmailExchangeTools Actions
Security → ExecMdoAlertsList
AI-generatedOverview
This node interacts with the CIPP API to retrieve Microsoft Defender for Office (MDO) alerts for a specified tenant. It supports fetching all alerts or a single page of results, with options for pagination, custom headers, query filters, and request debugging. This node is useful for security monitoring and alert management in multi-tenant environments, allowing users to programmatically access and process security alerts from MDO.
Use Case Examples
- Fetch all MDO alerts for a specific tenant to monitor security events.
- Retrieve a single page of MDO alerts with custom query filters for targeted alert analysis.
Properties
| Name | Meaning |
|---|---|
| Return All | Whether to return all results or only a single page. When disabled, no pagination parameters are sent and only one page of results is returned. |
| Tenant Filter | Target tenant domain or 'AllTenants' for multi-tenant operations. |
| Options | Additional optional settings such as custom request body, headers, query filters, batching, debug mode, pagination settings, and request timeout. |
Output
JSON
json- The JSON response from the ExecMdoAlertsList API endpoint, containing the list of MDO alerts and related data.debug- Optional debug information including the actual URL, query parameters, headers, and body sent for each API request, useful for troubleshooting.
Dependencies
- An API key credential for authenticating with the CIPP API
Troubleshooting
- Ensure the tenantFilter parameter is correctly set to a valid tenant domain or 'AllTenants'.
- If pagination is enabled, verify pagination parameters are correctly configured to avoid incomplete data retrieval.
- Enable debug mode to inspect the actual API request details if unexpected results or errors occur.
- Check API credentials and permissions to ensure access to the security alerts endpoint.