Microsoft Defender XDR icon

Microsoft Defender XDR

Interact with the Microsoft Defender XDR API

Actions3

Incident → Get

AI-generated

Summary

Retrieve detailed information about a single incident from Microsoft Defender XDR by specifying its Incident ID.

Inputs

  • Incident ID (required) — The ID of the incident to retrieve.
  • Request Options — Optional settings to control batching, SSL validation, proxy usage, and request timeout.

Output shape

a single incident record containing all available details from Microsoft Defender XDR for the specified incident ID.

The operation requires a valid Incident ID and returns the incident data if found. Optional request settings can adjust request behavior such as batching, SSL certificate validation, proxy settings, and timeout duration.

Examples

Example 1: Retrieve incident details

Set 'Incident ID' to the numeric ID of the incident you want to fetch.

Links

Discussion