Microsoft Sentinel

aid: microsoft-sentinel
name: Microsoft Sentinel
description: >-
  Microsoft Sentinel is a cloud-native security information and event management (SIEM) and security orchestration,
  automation, and response (SOAR) solution. It provides REST APIs for managing incidents, analytics rules, threat
  intelligence, and automation playbooks.
type: Index
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg
tags:
  - Microsoft
  - Security
  - SIEM
  - SOAR
  - Threat Detection
url: https://raw.githubusercontent.com/api-evangelist/microsoft-sentinel/refs/heads/main/apis.yml
created: '2024-01-01'
modified: '2026-05-19'
specificationVersion: '0.19'
apis:
  - aid: microsoft-sentinel:rest-api
    name: Microsoft Sentinel REST API
    tags:
      - Security
      - SIEM
      - SOAR
      - Threat Detection
    image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg
    baseURL: https://management.azure.com/
    humanURL: https://learn.microsoft.com/en-us/rest/api/securityinsights/
    properties:
      - url: https://learn.microsoft.com/en-us/rest/api/securityinsights/
        type: Documentation
      - url: https://learn.microsoft.com/en-us/azure/sentinel/quickstart-onboard
        type: GettingStarted
      - url: openapi/microsoft-sentinel-openapi.yml
        type: OpenAPI
    description: >-
      The Microsoft Sentinel REST API provides programmatic access to security incident management, threat intelligence,
      watchlists, analytics rules, and automation playbooks. Developers can manage incidents, configure data connectors,
      create custom detection rules, and automate security response workflows through Azure Resource Manager endpoints.
common:
  - type: GitHubOrganization
    url: https://github.com/Azure
  - type: Portal
    url: https://portal.azure.com/
  - type: Website
    url: https://azure.microsoft.com/en-us/products/microsoft-sentinel/
  - type: Documentation
    url: https://learn.microsoft.com/en-us/azure/sentinel/
  - type: Pricing
    url: https://azure.microsoft.com/en-us/pricing/details/microsoft-sentinel/
  - type: GettingStarted
    url: https://learn.microsoft.com/en-us/azure/sentinel/quickstart-onboard
  - type: Authentication
    url: https://learn.microsoft.com/en-us/azure/active-directory/develop/
  - type: TermsOfService
    url: https://www.microsoft.com/en-us/legal/terms-of-use
  - type: PrivacyPolicy
    url: https://privacy.microsoft.com/en-us/privacystatement
  - type: Support
    url: https://support.microsoft.com/
  - type: StatusPage
    url: https://status.azure.com/
maintainers:
  - FN: Kin Lane
    email: kin@apievangelist.com