Audit Log for Microsoft Sentinel Data Lake and Graph in Microsoft Purview Portal
Developer and API
Updated Microsoft Defender documentation in sentinel/datalake/auditing-lake-activities.md.
Cross-product topic
Developer and API
A cross-product view of Microsoft Defender changes related to Developer and API.
Latest Developer and API changes
Create a GitHub connector (private preview)
Developer and API
Updated Microsoft Defender documentation in exposure-management/create-github-connector.md.
Integrate Qualys data connector in Microsoft Security Exposure Management
Developer and API
Updated Microsoft Defender documentation in exposure-management/Qualys-data-connector.md.
Microsoft Defender Antivirus Using Powershell
Developer and API
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-antivirus-using-powershell.md.
Onboard to Microsoft Sentinel Data Lake and Graph
Developer and API
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-lake-onboarding.md.
Schedule antivirus scans using PowerShell
Developer and API
Updated Microsoft Defender documentation in defender-endpoint/schedule-antivirus-scans-powershell.md.
Unified Connector Syslog Device
Developer and API
Updated Microsoft Defender documentation in sentinel/unified-connector-syslog-device.md.
Use Powershell Cmdlets Microsoft Defender Antivirus
Developer and API
Updated Microsoft Defender documentation in defender-endpoint/use-powershell-cmdlets-microsoft-defender-antivirus.md.
Use the streaming API with Microsoft Defender for Business
Developer and API
Updated Microsoft Defender documentation in defender-business/mdb-streaming-api.md.
Create a GitHub connector for agentic code security
Developer and API
Added Microsoft Defender documentation in exposure-management/create-github-connector.md.
Access Den Graph Api
Developer and API
Removed Microsoft Defender documentation in defender-xdr/access-den-graph-api.md.
Api Create App User Context
Developer and API
Updated Microsoft Defender documentation in defender-xdr/api-create-app-user-context.md.
Api Create App Web
Developer and API
Updated Microsoft Defender documentation in defender-xdr/api-create-app-web.md.
Api Hello World
Developer and API
Updated Microsoft Defender documentation in defender-xdr/api-hello-world.md.
Api List Incidents
Developer and API
Updated Microsoft Defender documentation in defender-xdr/api-list-incidents.md.
Api Overview
Developer and API
Updated Microsoft Defender documentation in defender-xdr/api-overview.md.
Api Partner Access
Developer and API
Updated Microsoft Defender documentation in defender-xdr/api-partner-access.md.
Api Update Incidents
Developer and API
Updated Microsoft Defender documentation in defender-xdr/api-update-incidents.md.
Configure the Security Events or Windows Security Events connector for anomalous RDP login detection
Developer and API
Updated Microsoft Defender documentation in sentinel/configure-connector-login-detection.md.
Create Custom Connector
Developer and API
Updated Microsoft Defender documentation in sentinel/create-custom-connector.md.
Create deep links to Microsoft Sentinel graph queries
Developer and API
Added Microsoft Defender documentation in sentinel/datalake/create-deep-links-graph-queries.md.
Enable API security posture with Defender CSPM
Developer and API
Updated Microsoft Defender documentation in defender-for-cloud/enable-api-security-posture.md.
Enable gated deployment for AKS by using the managed cluster API
Developer and API
Updated Microsoft Defender documentation in defender-for-cloud/gated-deployment-infrastructure-as-code.md.
Find your Microsoft Sentinel data connector
Developer and API
Updated Microsoft Defender documentation in sentinel/data-connectors-reference.md.
Graph Visualization
Developer and API
Updated Microsoft Defender documentation in sentinel/datalake/graph-visualization.md.
Integrate the Armis OT data connector in Microsoft Security Exposure Management
Developer and API
Added Microsoft Defender documentation in exposure-management/armis-data-connector.md.
Integrate the Dragos OT data connector in Microsoft Security Exposure Management
Developer and API
Added Microsoft Defender documentation in exposure-management/dragos-data-connector.md.
Integrate the Forescout OT data connector in Microsoft Security Exposure Management
Developer and API
Added Microsoft Defender documentation in exposure-management/forescout-data-connector.md.
Investigate activities using the API
Developer and API
Updated Microsoft Defender documentation in defender-for-cloud-apps/api-activities-investigate-script.md.
Manage IP address ranges using the API
Developer and API
Updated Microsoft Defender documentation in defender-for-cloud-apps/api-data-enrichment-manage-script.md.
Microsoft Defender Antivirus Using Powershell
Developer and API
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-antivirus-using-powershell.md.
Microsoft Sentinel network normalization schema (Legacy version - Public preview)
Developer and API
Updated Microsoft Defender documentation in sentinel/normalization-schema-v1.md.
Microsoft Sentinel user management normalization schema reference
Developer and API
Updated Microsoft Defender documentation in sentinel/normalization-schema-user-management.md.
Monitor Data Connector Health
Developer and API
Updated Microsoft Defender documentation in sentinel/monitor-data-connector-health.md.
Query Enterprise Exposure Graph
Developer and API
Updated Microsoft Defender documentation in exposure-management/query-enterprise-exposure-graph.md.
Respond to a compromised connector
Developer and API
Updated Microsoft Defender documentation in defender-office-365/connectors-detect-respond-to-compromise.md.
Secure OAuth apps accessing non-Graph APIs using app governance
Developer and API
Updated Microsoft Defender documentation in defender-for-cloud-apps/app-governance-secure-apps-access-non-graph-api.md.
Sentinel Mcp Graph Tool
Developer and API
Removed Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-graph-tool.md.
Setup Azure Storage Connector
Developer and API
Updated Microsoft Defender documentation in sentinel/setup-azure-storage-connector.md.
The Advanced Security Information Model (ASIM) Asset Entity normalization schema reference
Developer and API
Updated Microsoft Defender documentation in sentinel/normalization-schema-asset.md.
The Advanced Security Information Model (ASIM) Audit Events normalization schema reference
Developer and API
Updated Microsoft Defender documentation in sentinel/normalization-schema-audit.md.
The Advanced Security Information Model (ASIM) Authentication normalization schema reference
Developer and API
Updated Microsoft Defender documentation in sentinel/normalization-schema-authentication.md.
The Advanced Security Information Model (ASIM) common schema fields reference
Developer and API
Updated Microsoft Defender documentation in sentinel/normalization-common-fields.md.
The Advanced Security Information Model (ASIM) DHCP normalization schema reference
Developer and API
Updated Microsoft Defender documentation in sentinel/normalization-schema-dhcp.md.
The Advanced Security Information Model (ASIM) DNS normalization schema reference
Developer and API
Updated Microsoft Defender documentation in sentinel/normalization-schema-dns.md.
The Advanced Security Information Model (ASIM) File Event normalization schema reference
Developer and API
Updated Microsoft Defender documentation in sentinel/normalization-schema-file-event.md.
The Advanced Security Information Model (ASIM) Network Session normalization schema reference
Developer and API
Updated Microsoft Defender documentation in sentinel/normalization-schema-network.md.
The Advanced Security Information Model (ASIM) Process Event normalization schema reference
Developer and API
Updated Microsoft Defender documentation in sentinel/normalization-schema-process-event.md.
The Advanced Security Information Model (ASIM) Registry Event normalization schema reference
Developer and API
Updated Microsoft Defender documentation in sentinel/normalization-schema-registry-event.md.
The Advanced Security Information Model (ASIM) Web Session normalization schema reference
Developer and API
Updated Microsoft Defender documentation in sentinel/normalization-schema-web.md.
Audit log for Microsoft Sentinel data lake and graph in Microsoft Purview portal
Developer and API
Updated Microsoft Defender documentation in sentinel/datalake/auditing-lake-activities.md.
Create a codeless connector for Microsoft Sentinel
Developer and API
Added Microsoft Defender documentation in sentinel/isv/create-codeless-connector.md.
Create Codeless Connector
Developer and API
Removed Microsoft Defender documentation in sentinel/create-codeless-connector.md.
Create Custom Connector
Developer and API
Updated Microsoft Defender documentation in sentinel/create-custom-connector.md.
Create Custom Connector Builder Agent
Developer and API
Removed Microsoft Defender documentation in sentinel/create-custom-connector-builder-agent.md.
Create Push Codeless Connector
Developer and API
Removed Microsoft Defender documentation in sentinel/create-push-codeless-connector.md.
Data Connector Connection Rules Reference
Developer and API
Updated Microsoft Defender documentation in sentinel/data-connector-connection-rules-reference.md.
Data Connector Ui Definitions Reference
Developer and API
Updated Microsoft Defender documentation in sentinel/data-connector-ui-definitions-reference.md.
Deploy an SAP data connector agent from the command line
Developer and API
Updated Microsoft Defender documentation in sentinel/sap/deploy-command-line.md.
Deploy the Microsoft Sentinel for SAP data connector agent container using expert configuration options
Developer and API
Updated Microsoft Defender documentation in sentinel/sap/sap-solution-deploy-alternate.md.
Monitor Data Connector Health
Developer and API
Updated Microsoft Defender documentation in sentinel/monitor-data-connector-health.md.
Normalization Schema Asset
Developer and API
Updated Microsoft Defender documentation in sentinel/normalization-schema-asset.md.
Normalization Schema Network
Developer and API
Updated Microsoft Defender documentation in sentinel/normalization-schema-network.md.
Onboarding to Microsoft Sentinel data lake and graph
Developer and API
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-lake-onboarding.md.
Secure apps accessing non-Graph APIs using app governance
Developer and API
Updated Microsoft Defender documentation in defender-for-cloud-apps/app-governance-secure-apps-access-non-graph-api.md.
Sentinel Mcp Chatgpt Claude Connector
Developer and API
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-chatgpt-claude-connector.md.
Setup Azure Storage Connector
Developer and API
Updated Microsoft Defender documentation in sentinel/setup-azure-storage-connector.md.
Update the Microsoft Sentinel for SAP applications data connector agent
Developer and API
Updated Microsoft Defender documentation in sentinel/sap/update-sap-data-connector.md.
Work with discovered apps via Graph API | Microsoft Defender for Cloud Apps
Developer and API
Updated Microsoft Defender documentation in defender-for-cloud-apps/discovered-apps-api-graph.md.
Connect Microsoft Sentinel to other Microsoft services with an API-based data connector
Developer and API
Updated Microsoft Defender documentation in sentinel/connect-services-api-based.md.
Create custom Microsoft Defender XDR reports using Microsoft Graph security API and Power BI
Developer and API
Updated Microsoft Defender documentation in defender-xdr/defender-xdr-custom-reports.md.
Evaluate Microsoft Defender Antivirus using PowerShell
Developer and API
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-antivirus-using-powershell.md.
Schedule antivirus scans using PowerShell
Developer and API
Updated Microsoft Defender documentation in defender-endpoint/schedule-antivirus-scans-powershell.md.
Use PowerShell cmdlets to configure and manage Microsoft Defender Antivirus
Developer and API
Updated Microsoft Defender documentation in defender-endpoint/use-powershell-cmdlets-microsoft-defender-antivirus.md.
Configure Data Connector
Developer and API
Updated Microsoft Defender documentation in sentinel/configure-data-connector.md.
Connect Mdti Data Connector
Developer and API
Updated Microsoft Defender documentation in sentinel/connect-mdti-data-connector.md.
Connect Threat Intelligence Upload Api
Developer and API
Updated Microsoft Defender documentation in sentinel/connect-threat-intelligence-upload-api.md.
Create Codeless Connector
Developer and API
Updated Microsoft Defender documentation in sentinel/create-codeless-connector.md.
Use the Microsoft Defender for Endpoint Power Automate connector to create event-triggered flows
Developer and API
Updated Microsoft Defender documentation in defender-endpoint/api-microsoft-flow.md.
API and API Management security recommendations
Developer and API
Updated Microsoft Defender documentation in defender-for-cloud/recommendations-reference-api.md.
Api Security Posture Overview
Developer and API
Updated Microsoft Defender documentation in defender-for-cloud/api-security-posture-overview.md.
Api Security Posture Overview
Developer and API
Updated Microsoft Defender documentation in defender-for-cloud/api-security-posture-overview.md.
API Security with Defender for APIs
Developer and API
Updated Microsoft Defender documentation in defender-for-cloud/episode-thirty-two.md.
Automate connector deployment
Developer and API
Updated Microsoft Defender documentation in defender-for-cloud/plan-multicloud-security-automate-connector-deployment.md.
Automate onboarding of Microsoft Defender for Cloud using PowerShell
Developer and API
Updated Microsoft Defender documentation in defender-for-cloud/powershell-onboarding.md.
Azure Resource Graph sample queries for Microsoft Defender for Cloud
Developer and API
Updated Microsoft Defender documentation in defender-for-cloud/resource-graph-samples.md.
Enable and configure Defender for Storage by using the REST API
Developer and API
Updated Microsoft Defender documentation in defender-for-cloud/defender-for-storage-rest-api-enablement.md.
Enable and configure Microsoft Defender for Storage with Azure PowerShell
Developer and API
Updated Microsoft Defender documentation in defender-for-cloud/defender-for-storage-powershell-enablement.md.
Enable API security posture with Defender CSPM
Developer and API
Updated Microsoft Defender documentation in defender-for-cloud/enable-api-security-posture.md.
Enable API security posture with Defender CSPM
Developer and API
Updated Microsoft Defender documentation in defender-for-cloud/enable-api-security-posture.md.
Enable API security posture with Defender CSPM
Developer and API
Updated Microsoft Defender documentation in defender-for-cloud/enable-api-security-posture.md.
Enable API security posture with Defender CSPM
Developer and API
Updated Microsoft Defender documentation in defender-for-cloud/enable-api-security-posture.md.
Express configuration PowerShell commands reference
Developer and API
Updated Microsoft Defender documentation in defender-for-cloud/express-configuration-powershell-commands.md.
Express configuration PowerShell wrapper module
Developer and API
Updated Microsoft Defender documentation in defender-for-cloud/express-configuration-sql-commands.md.
Get started with the unified SQL Vulnerability Assessment REST API
Developer and API
Updated Microsoft Defender documentation in defender-for-cloud/powershell-unified-api-quickstart.md.
Improve your API security posture
Developer and API
Updated Microsoft Defender documentation in defender-for-cloud/api-security-posture-overview.md.
Improve your API security posture
Developer and API
Updated Microsoft Defender documentation in defender-for-cloud/api-security-posture-overview.md.
Investigate API findings, recommendations, and alerts
Developer and API
Updated Microsoft Defender documentation in defender-for-cloud/defender-for-apis-posture.md.
New AWS connector in Microsoft Defender for Cloud
Developer and API
Updated Microsoft Defender documentation in defender-for-cloud/episode-one.md.
New GCP connector in Microsoft Defender for Cloud
Developer and API
Updated Microsoft Defender documentation in defender-for-cloud/episode-seven.md.
Overview of API security testing integrations (preview)
Developer and API
Updated Microsoft Defender documentation in defender-for-cloud/defender-partner-applications.md.
Recommendations Reference Api
Developer and API
Updated Microsoft Defender documentation in defender-for-cloud/recommendations-reference-api.md.
Recommendations Reference Api
Developer and API
Updated Microsoft Defender documentation in defender-for-cloud/recommendations-reference-api.md.
Retrieve attack path data with API
Developer and API
Updated Microsoft Defender documentation in defender-for-cloud/attack-path-api.md.
Alerts schema
Developer and API
Added Microsoft Defender documentation in defender-for-cloud/alerts-schemas.md.
API security posture overview
Developer and API
Added Microsoft Defender documentation in defender-for-cloud/api-security-posture-overview.md.
API Security with Defender for APIs | Defender for Cloud in the field
Developer and API
Added Microsoft Defender documentation in defender-for-cloud/episode-thirty-two.md.
Automate connector deployment
Developer and API
Added Microsoft Defender documentation in defender-for-cloud/plan-multicloud-security-automate-connector-deployment.md.
Azure Resource Graph sample queries
Developer and API
Added Microsoft Defender documentation in defender-for-cloud/resource-graph-samples.md.
Connect Threat Intelligence Upload Api
Developer and API
Updated Microsoft Defender documentation in sentinel/connect-threat-intelligence-upload-api.md.
Enable API security posture with Defender CSPM
Developer and API
Added Microsoft Defender documentation in defender-for-cloud/enable-api-security-posture.md.
Enable Defender for Storage by Using the REST API
Developer and API
Added Microsoft Defender documentation in defender-for-cloud/defender-for-storage-rest-api-enablement.md.
Enable Microsoft Defender for Storage with Azure PowerShell
Developer and API
Added Microsoft Defender documentation in defender-for-cloud/defender-for-storage-powershell-enablement.md.
Enable the Defender Threat Intelligence data connector in Microsoft Sentinel
Developer and API
Updated Microsoft Defender documentation in sentinel/connect-mdti-data-connector.md.
Express configuration PowerShell commands reference
Developer and API
Added Microsoft Defender documentation in defender-for-cloud/express-configuration-powershell-commands.md.
Express configuration PowerShell wrapper module
Developer and API
Added Microsoft Defender documentation in defender-for-cloud/express-configuration-sql-commands.md.
Get started with the unified SQL Vulnerability Assessment REST API
Developer and API
Added Microsoft Defender documentation in defender-for-cloud/powershell-unified-api-quickstart.md.
Investigate your API security findings and posture
Developer and API
Added Microsoft Defender documentation in defender-for-cloud/defender-for-apis-posture.md.
New AWS connector
Developer and API
Added Microsoft Defender documentation in defender-for-cloud/episode-one.md.