50a78964-71f9-4904-b5b8-aa6b57145e2c.connector

The Microsoft Graph API for Security connector provides access to Microsoft's advanced threat protection capabilities through the "Advanced Hunting" blade in the Defender Security Portal. This connector allows you to execute queries against the Advanced Hunting data, enabling deep security analysis and threat hunting within your organization's Microsoft 365 Defender environment.

This connector Executes only against the Security API endpoint.

Connector for interacting with Microsoft Graph API for Security to execute KQL queries against the Advance Hunting Tables

Version	Release Date	Download Link
1.3.0	May 12, 2025
What's changed Authentication Base URL Event notification basic user name Instance Variables Filter null values from the response Pagination type Event notification signature key Refresh token allow.automatic.redirects Refresh interval Client ID tenant Event notifications enable Client secret Default select fields Token URL Max Page Size (or limit) Event notification basic password Event notification callback headers Connection Identity Lookup Key Scope Access token Connection name Event poller refresh interval Authentication time Synchronous Bulk Notification Event poller resources configuration Refresh time Basic header