Actions41
- Advanced Query Actions
- Alert Actions
- Exposure Score Actions
- Indicator Actions
- Investigation Actions
- Machine Actions
- Machine Action Actions
- Recommendation Actions
- Remediation Actions
- Software Actions
- Vulnerability Actions
Investigation → Get Investigation By ID
AI-generatedSummary
Retrieve details of a specific Microsoft Defender investigation by its ID.
Inputs
- Investigation ID (required) — The ID of the investigation to retrieve.
Output shape
a single record containing the investigation details
Requires a valid investigation ID parameter; authentication is done via OAuth2. Returned data corresponds to the investigation resource retrieved from the endpoint /api/investigations/{investigationId}.