-
Notifications
You must be signed in to change notification settings - Fork 229
Open
Labels
enhancementNew feature or requestNew feature or request
Description
Currently, the msatp
connector does not support the newer Microsoft Graph Security API endpoint (POST /security/runHuntingQuery
) and is instead hard-coded to use the legacy Defender for Endpoint Advanced Hunting API (/api/advancedqueries/run
). We need to extend the connector to optionally call the new Graph endpoint under the ThreatHunting.Read.All
permission while reusing the existing STIX translation and result-formatting infrastructure.
Metadata
Metadata
Assignees
Labels
enhancementNew feature or requestNew feature or request