# Microsoft Defender XDR API

**Canonical:** https://apis.io/apis/microsoft-defender/microsoft-defender-xdr-api/  
**Provider:** Microsoft Defender — https://apis.io/providers/microsoft-defender/

Microsoft Defender XDR API is one of 9 APIs that [Microsoft Defender](https://apis.io/providers/microsoft-defender/) publishes on the [APIs.io](https://apis.io/) network. Tagged areas include Advanced Hunting, Event Streaming, Incidents, Threat Protection, and XDR. The published artifact set on APIs.io includes API documentation, an API reference, and authentication docs.

Unified extended detection and response API for automating workflows based on shared incident and advanced hunting tables across Microsoft security products.

## Machine-readable artifacts (8)

- **Documentation** — https://learn.microsoft.com/en-us/defender-xdr/api-overview
- **APIReference** — https://learn.microsoft.com/en-us/defender-xdr/api-supported
- **Authentication** — https://learn.microsoft.com/en-us/defender-xdr/api-access
- **Incidents API** — https://learn.microsoft.com/en-us/defender-xdr/api-incident
- **Advanced Hunting API** — https://learn.microsoft.com/en-us/defender-xdr/api-advanced-hunting
- **Streaming API** — https://learn.microsoft.com/en-us/defender-xdr/streaming-api
- **Supported Event Types** — https://learn.microsoft.com/en-us/defender-xdr/supported-event-types
- **ErrorCodes** — https://learn.microsoft.com/en-us/defender-xdr/api-error-codes

## Other Microsoft Defender APIs (8)

- [Microsoft Defender for Cloud Apps API](https://apis.io/apis/microsoft-defender/microsoft-defender-for-cloud-apps-api/)
- [Microsoft Defender Threat Intelligence API](https://apis.io/apis/microsoft-defender/microsoft-defender-threat-intelligence-api/)
- [Microsoft Defender for Office 365 API](https://apis.io/apis/microsoft-defender/microsoft-defender-for-office-365-api/)
- [Microsoft Defender for Cloud REST API](https://apis.io/apis/microsoft-defender/microsoft-defender-for-cloud-rest-api/)
- [Microsoft Defender for Identity API](https://apis.io/apis/microsoft-defender/microsoft-defender-for-identity-api/)
- [Microsoft Defender Alerts API](https://apis.io/apis/microsoft-defender/microsoft-defender-alerts-api/)
- [Microsoft Defender Machines API](https://apis.io/apis/microsoft-defender/microsoft-defender-machines-api/)
- [Microsoft Defender Vulnerabilities API](https://apis.io/apis/microsoft-defender/microsoft-defender-vulnerabilities-api/)

## Tags

Advanced Hunting, Event Streaming, Incidents, Threat Protection, XDR

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/microsoft-defender/microsoft-defender-xdr-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/microsoft-defender/.