Microsoft Graph Security

Microsoft Graph Security is a unified set of APIs within Microsoft Graph that lets you access, correlate, and act on security data across Microsoft 365 and integrated security solutions. It normalizes alerts and incidents from Microsoft Defender products and other providers, exposes security posture information such as Secure Score, and supports managing threat intelligence indicators. Developers use it to query and update alerts/incidents, automate response workflows, subscribe to change notifications, and integrate security insights into SIEM/SOAR tools and custom appsall through a consistent schema, single authentication and permissions model, and SDKs that simplify development.