Microsoft Defender · Controlled Vocabulary

Microsoft Defender Domain Vocabulary

Tag-derived vocabulary for the Microsoft Defender API surface; sourced from openapi/ tags.

3 Terms Updated

Microsoft Defender Vocabulary is a controlled vocabulary published by Microsoft Defender on the APIs.io network, defining 3 terms.

Defined terms include Alerts, Machines, and Vulnerabilities.

A controlled vocabulary pins the words an API’s schemas, parameters and documentation use to one agreed definition each — the shared language a human or an agent needs to read the API the same way its authors do.

Terms

Alerts

Manage security alerts generated by Microsoft Defender for Endpoint. Alerts represent detected threats, suspicious activities, and security events on endpoints.

Machines

Manage devices (machines) that have communicated with Microsoft Defender for Endpoint. Retrieve device information, health status, risk scores, and exposure levels.

Vulnerabilities

Retrieve vulnerability information from Microsoft Defender Vulnerability Management. Access CVE data, severity scores, exploit information, and exposure metrics.

Controlled Vocabulary

name: Microsoft Defender Domain Vocabulary
provider: Microsoft Defender
providerId: microsoft-defender
description: Tag-derived vocabulary for the Microsoft Defender API surface; sourced from openapi/ tags.
terms:
- term: Alerts
  description: Manage security alerts generated by Microsoft Defender for Endpoint. Alerts represent detected threats, suspicious
    activities, and security events on endpoints.
- term: Machines
  description: Manage devices (machines) that have communicated with Microsoft Defender for Endpoint. Retrieve device information,
    health status, risk scores, and exposure levels.
- term: Vulnerabilities
  description: Retrieve vulnerability information from Microsoft Defender Vulnerability Management. Access CVE data, severity
    scores, exploit information, and exposure metrics.