Microsoft Defender API icon

Microsoft Defender API

Interact with the Microsoft Defender API

Alert → Get Alert

AI-generated

Summary

Retrieve a specific security alert from Microsoft Defender by its unique Alert ID using OAuth2 authentication.

Inputs

  • Authentication — Select OAuth2 as the authentication method.
  • Alert ID (required) — Specify the unique ID of the security alert to retrieve.
  • Request Options — Optional settings such as batching, SSL certificate validation ignore, proxy, and request timeout.

Output shape

a single alert object representing the specified alert ID

The returned alert object contains detailed information about the security alert. Request is made via a GET HTTP call to /api/alerts/{alertId} where {alertId} is the user-provided Alert ID. Errors occur if the Alert ID is invalid or not found.

Links

Discussion