Microsoft Defender

Microsoft Defender Threat Intelligence API

Access threat intelligence data, indicators of compromise (IOCs), and threat analytics.

GitHub

Documentation

📖
Documentation
https://learn.microsoft.com/en-us/graph/api/resources/security-threatintelligence-overview
📖
APIReference
https://learn.microsoft.com/en-us/graph/api/resources/security-api-overview
📖
Authentication
https://learn.microsoft.com/en-us/graph/auth/

API entry from apis.yml

apis.yml Raw ↑ 
name: Microsoft Defender Threat Intelligence API
description: Access threat intelligence data, indicators of compromise (IOCs), and threat analytics.
image: https://www.microsoft.com/favicon.ico
humanUrl: https://learn.microsoft.com/en-us/defender/threat-intelligence/
baseUrl: https://graph.microsoft.com/v1.0/security/threatIntelligence
tags:
- IOC
- Security Intelligence
- Threat Analytics
- Threat Intelligence
properties:
- type: Documentation
  url: https://learn.microsoft.com/en-us/graph/api/resources/security-threatintelligence-overview
- type: APIReference
  url: https://learn.microsoft.com/en-us/graph/api/resources/security-api-overview
- type: Authentication
  url: https://learn.microsoft.com/en-us/graph/auth/