How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Need help?

Contact us
Microsoft Graph

Microsoft Graph security.threatIntelligence API

The security.threatIntelligence API from Microsoft Graph — 121 operation(s) for security.threatintelligence.

Documentation Provider Profile APIs.io OpenAPI GitHub

Microsoft Graph security.threatIntelligence API is one of 564 APIs that Microsoft Graph publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

The published artifact set on APIs.io includes an OpenAPI specification and API documentation.

This API exposes 179 operations across 121 paths, and defines 69 schemas. It is described by OpenAPI 3.2.0, at version 1.0.0.

Requests are made against a single base URL, https://graph.microsoft.com/v1.0.

179 operations 121 paths 69 schemas 20 DELETE121 GET20 PATCH18 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
1.0.0
Base URL
https://graph.microsoft.com/v1.0
Contact
Microsoft Graph API Support
Resource Areas
1

Paths & Operations 179

Across 121 paths, the API surfaces 179 operations — 20 DELETE, 121 GET, 20 PATCH, 18 POST. Each is listed below with its method, path, parameters, and response codes.

security.threatIntelligence 179
GET
/security/threatIntelligence
Microsoft Graph Get threatIntelligence from security
security.GetThreatIntelligence 2 params → 2XX4XX5XX
PATCH
/security/threatIntelligence
Microsoft Graph Update the navigation property threatIntelligence in security
security.UpdateThreatIntelligence body → 2XX4XX5XX
DELETE
/security/threatIntelligence
Microsoft Graph Delete navigation property threatIntelligence for security
security.DeleteThreatIntelligence 1 param → 2044XX5XX
GET
/security/threatIntelligence/articleIndicators
Microsoft Graph Get articleIndicator
security.threatIntelligence.ListArticleIndicators 8 params → 2XX4XX5XX
POST
/security/threatIntelligence/articleIndicators
Microsoft Graph Create new navigation property to articleIndicators for security
security.threatIntelligence.CreateArticleIndicators body → 2XX4XX5XX
GET
/security/threatIntelligence/articleIndicators/{articleIndicator-id}
Microsoft Graph Get articleIndicator
security.threatIntelligence.GetArticleIndicators 3 params → 2XX4XX5XX
PATCH
/security/threatIntelligence/articleIndicators/{articleIndicator-id}
Microsoft Graph Update the navigation property articleIndicators in security
security.threatIntelligence.UpdateArticleIndicators 1 param body → 2XX4XX5XX
DELETE
/security/threatIntelligence/articleIndicators/{articleIndicator-id}
Microsoft Graph Delete navigation property articleIndicators for security
security.threatIntelligence.DeleteArticleIndicators 2 params → 2044XX5XX
GET
/security/threatIntelligence/articleIndicators/{articleIndicator-id}/artifact
Microsoft Graph Get artifact from security
security.threatIntelligence.articleIndicators.GetArtifact 3 params → 2XX4XX5XX
GET
/security/threatIntelligence/articleIndicators/$count
Microsoft Graph Get the number of the resource
security.threatIntelligence.articleIndicators.GetCount-c9c7 2 params → 2XX4XX5XX
GET
/security/threatIntelligence/articles
Microsoft Graph List articles
security.threatIntelligence.ListArticles 8 params → 2XX4XX5XX
POST
/security/threatIntelligence/articles
Microsoft Graph Create new navigation property to articles for security
security.threatIntelligence.CreateArticles body → 2XX4XX5XX
GET
/security/threatIntelligence/articles/{article-id}
Microsoft Graph Get article
security.threatIntelligence.GetArticles 3 params → 2XX4XX5XX
PATCH
/security/threatIntelligence/articles/{article-id}
Microsoft Graph Update the navigation property articles in security
security.threatIntelligence.UpdateArticles 1 param body → 2XX4XX5XX
DELETE
/security/threatIntelligence/articles/{article-id}
Microsoft Graph Delete navigation property articles for security
security.threatIntelligence.DeleteArticles 2 params → 2044XX5XX
GET
/security/threatIntelligence/articles/{article-id}/indicators
Microsoft Graph List indicators
security.threatIntelligence.articles.ListIndicators 9 params → 2XX4XX5XX
GET
/security/threatIntelligence/articles/{article-id}/indicators/{articleIndicator-id}
Microsoft Graph Get indicators from security
security.threatIntelligence.articles.GetIndicators 4 params → 2XX4XX5XX
GET
/security/threatIntelligence/articles/{article-id}/indicators/$count
Microsoft Graph Get the number of the resource
security.threatIntelligence.articles.indicators.GetCount-1d6c 3 params → 2XX4XX5XX
GET
/security/threatIntelligence/articles/$count
Microsoft Graph Get the number of the resource
security.threatIntelligence.articles.GetCount-3702 2 params → 2XX4XX5XX
GET
/security/threatIntelligence/hostComponents
Microsoft Graph Get hostComponent
security.threatIntelligence.ListHostComponents 8 params → 2XX4XX5XX
POST
/security/threatIntelligence/hostComponents
Microsoft Graph Create new navigation property to hostComponents for security
security.threatIntelligence.CreateHostComponents body → 2XX4XX5XX
GET
/security/threatIntelligence/hostComponents/{hostComponent-id}
Microsoft Graph Get hostComponent
security.threatIntelligence.GetHostComponents 3 params → 2XX4XX5XX
PATCH
/security/threatIntelligence/hostComponents/{hostComponent-id}
Microsoft Graph Update the navigation property hostComponents in security
security.threatIntelligence.UpdateHostComponents 1 param body → 2XX4XX5XX
DELETE
/security/threatIntelligence/hostComponents/{hostComponent-id}
Microsoft Graph Delete navigation property hostComponents for security
security.threatIntelligence.DeleteHostComponents 2 params → 2044XX5XX
GET
/security/threatIntelligence/hostComponents/{hostComponent-id}/host
Microsoft Graph Get host from security
security.threatIntelligence.hostComponents.GetHost 3 params → 2XX4XX5XX
GET
/security/threatIntelligence/hostComponents/$count
Microsoft Graph Get the number of the resource
security.threatIntelligence.hostComponents.GetCount-3ca4 2 params → 2XX4XX5XX
GET
/security/threatIntelligence/hostCookies
Microsoft Graph Get hostCookie
security.threatIntelligence.ListHostCookies 8 params → 2XX4XX5XX
POST
/security/threatIntelligence/hostCookies
Microsoft Graph Create new navigation property to hostCookies for security
security.threatIntelligence.CreateHostCookies body → 2XX4XX5XX
GET
/security/threatIntelligence/hostCookies/{hostCookie-id}
Microsoft Graph Get hostCookie
security.threatIntelligence.GetHostCookies 3 params → 2XX4XX5XX
PATCH
/security/threatIntelligence/hostCookies/{hostCookie-id}
Microsoft Graph Update the navigation property hostCookies in security
security.threatIntelligence.UpdateHostCookies 1 param body → 2XX4XX5XX
DELETE
/security/threatIntelligence/hostCookies/{hostCookie-id}
Microsoft Graph Delete navigation property hostCookies for security
security.threatIntelligence.DeleteHostCookies 2 params → 2044XX5XX
GET
/security/threatIntelligence/hostCookies/{hostCookie-id}/host
Microsoft Graph Get host from security
security.threatIntelligence.hostCookies.GetHost 3 params → 2XX4XX5XX
GET
/security/threatIntelligence/hostCookies/$count
Microsoft Graph Get the number of the resource
security.threatIntelligence.hostCookies.GetCount-ca74 2 params → 2XX4XX5XX
GET
/security/threatIntelligence/hostPairs
Microsoft Graph Get hostPair
security.threatIntelligence.ListHostPairs 8 params → 2XX4XX5XX
POST
/security/threatIntelligence/hostPairs
Microsoft Graph Create new navigation property to hostPairs for security
security.threatIntelligence.CreateHostPairs body → 2XX4XX5XX
GET
/security/threatIntelligence/hostPairs/{hostPair-id}
Microsoft Graph Get hostPair
security.threatIntelligence.GetHostPairs 3 params → 2XX4XX5XX
PATCH
/security/threatIntelligence/hostPairs/{hostPair-id}
Microsoft Graph Update the navigation property hostPairs in security
security.threatIntelligence.UpdateHostPairs 1 param body → 2XX4XX5XX
DELETE
/security/threatIntelligence/hostPairs/{hostPair-id}
Microsoft Graph Delete navigation property hostPairs for security
security.threatIntelligence.DeleteHostPairs 2 params → 2044XX5XX
GET
/security/threatIntelligence/hostPairs/{hostPair-id}/childHost
Microsoft Graph Get childHost from security
security.threatIntelligence.hostPairs.GetChildHost 3 params → 2XX4XX5XX
GET
/security/threatIntelligence/hostPairs/{hostPair-id}/parentHost
Microsoft Graph Get parentHost from security
security.threatIntelligence.hostPairs.GetParentHost 3 params → 2XX4XX5XX
GET
/security/threatIntelligence/hostPairs/$count
Microsoft Graph Get the number of the resource
security.threatIntelligence.hostPairs.GetCount-6e30 2 params → 2XX4XX5XX
GET
/security/threatIntelligence/hostPorts
Microsoft Graph Get hostPort
security.threatIntelligence.ListHostPorts 8 params → 2XX4XX5XX
POST
/security/threatIntelligence/hostPorts
Microsoft Graph Create new navigation property to hostPorts for security
security.threatIntelligence.CreateHostPorts body → 2XX4XX5XX
GET
/security/threatIntelligence/hostPorts/{hostPort-id}
Microsoft Graph Get hostPort
security.threatIntelligence.GetHostPorts 3 params → 2XX4XX5XX
PATCH
/security/threatIntelligence/hostPorts/{hostPort-id}
Microsoft Graph Update the navigation property hostPorts in security
security.threatIntelligence.UpdateHostPorts 1 param body → 2XX4XX5XX
DELETE
/security/threatIntelligence/hostPorts/{hostPort-id}
Microsoft Graph Delete navigation property hostPorts for security
security.threatIntelligence.DeleteHostPorts 2 params → 2044XX5XX
GET
/security/threatIntelligence/hostPorts/{hostPort-id}/host
Microsoft Graph Get host from security
security.threatIntelligence.hostPorts.GetHost 3 params → 2XX4XX5XX
GET
/security/threatIntelligence/hostPorts/{hostPort-id}/mostRecentSslCertificate
Microsoft Graph Get mostRecentSslCertificate from security
security.threatIntelligence.hostPorts.GetMostRecentSslCertificate 3 params → 2XX4XX5XX
GET
/security/threatIntelligence/hostPorts/$count
Microsoft Graph Get the number of the resource
security.threatIntelligence.hostPorts.GetCount-5189 2 params → 2XX4XX5XX
GET
/security/threatIntelligence/hosts
Microsoft Graph Get host
security.threatIntelligence.ListHosts 8 params → 2XX4XX5XX
POST
/security/threatIntelligence/hosts
Microsoft Graph Create new navigation property to hosts for security
security.threatIntelligence.CreateHosts body → 2XX4XX5XX
GET
/security/threatIntelligence/hosts/{host-id}
Microsoft Graph Get host
security.threatIntelligence.GetHosts 3 params → 2XX4XX5XX
PATCH
/security/threatIntelligence/hosts/{host-id}
Microsoft Graph Update the navigation property hosts in security
security.threatIntelligence.UpdateHosts 1 param body → 2XX4XX5XX
DELETE
/security/threatIntelligence/hosts/{host-id}
Microsoft Graph Delete navigation property hosts for security
security.threatIntelligence.DeleteHosts 2 params → 2044XX5XX
GET
/security/threatIntelligence/hosts/{host-id}/childHostPairs
Microsoft Graph List childHostPairs
security.threatIntelligence.hosts.ListChildHostPairs 9 params → 2XX4XX5XX
GET
/security/threatIntelligence/hosts/{host-id}/childHostPairs/{hostPair-id}
Microsoft Graph Get childHostPairs from security
security.threatIntelligence.hosts.GetChildHostPairs 4 params → 2XX4XX5XX
GET
/security/threatIntelligence/hosts/{host-id}/childHostPairs/$count
Microsoft Graph Get the number of the resource
security.threatIntelligence.hosts.childHostPairs.GetCount-d960 3 params → 2XX4XX5XX
GET
/security/threatIntelligence/hosts/{host-id}/components
Microsoft Graph List components
security.threatIntelligence.hosts.ListComponents 9 params → 2XX4XX5XX
GET
/security/threatIntelligence/hosts/{host-id}/components/{hostComponent-id}
Microsoft Graph Get components from security
security.threatIntelligence.hosts.GetComponents 4 params → 2XX4XX5XX
GET
/security/threatIntelligence/hosts/{host-id}/components/$count
Microsoft Graph Get the number of the resource
security.threatIntelligence.hosts.components.GetCount-3f6d 3 params → 2XX4XX5XX
GET
/security/threatIntelligence/hosts/{host-id}/cookies
Microsoft Graph List cookies
security.threatIntelligence.hosts.ListCookies 9 params → 2XX4XX5XX
GET
/security/threatIntelligence/hosts/{host-id}/cookies/{hostCookie-id}
Microsoft Graph Get cookies from security
security.threatIntelligence.hosts.GetCookies 4 params → 2XX4XX5XX
GET
/security/threatIntelligence/hosts/{host-id}/cookies/$count
Microsoft Graph Get the number of the resource
security.threatIntelligence.hosts.cookies.GetCount-d607 3 params → 2XX4XX5XX
GET
/security/threatIntelligence/hosts/{host-id}/hostPairs
Microsoft Graph List hostPairs
security.threatIntelligence.hosts.ListHostPairs 9 params → 2XX4XX5XX
GET
/security/threatIntelligence/hosts/{host-id}/hostPairs/{hostPair-id}
Microsoft Graph Get hostPairs from security
security.threatIntelligence.hosts.GetHostPairs 4 params → 2XX4XX5XX
GET
/security/threatIntelligence/hosts/{host-id}/hostPairs/$count
Microsoft Graph Get the number of the resource
security.threatIntelligence.hosts.hostPairs.GetCount-e637 3 params → 2XX4XX5XX
GET
/security/threatIntelligence/hosts/{host-id}/parentHostPairs
Microsoft Graph List parentHostPairs
security.threatIntelligence.hosts.ListParentHostPairs 9 params → 2XX4XX5XX
GET
/security/threatIntelligence/hosts/{host-id}/parentHostPairs/{hostPair-id}
Microsoft Graph Get parentHostPairs from security
security.threatIntelligence.hosts.GetParentHostPairs 4 params → 2XX4XX5XX
GET
/security/threatIntelligence/hosts/{host-id}/parentHostPairs/$count
Microsoft Graph Get the number of the resource
security.threatIntelligence.hosts.parentHostPairs.GetCount-51b4 3 params → 2XX4XX5XX
GET
/security/threatIntelligence/hosts/{host-id}/passiveDns
Microsoft Graph List passiveDns
security.threatIntelligence.hosts.ListPassiveDns 9 params → 2XX4XX5XX
GET
/security/threatIntelligence/hosts/{host-id}/passiveDns/{passiveDnsRecord-id}
Microsoft Graph Get passiveDns from security
security.threatIntelligence.hosts.GetPassiveDns 4 params → 2XX4XX5XX
GET
/security/threatIntelligence/hosts/{host-id}/passiveDns/$count
Microsoft Graph Get the number of the resource
security.threatIntelligence.hosts.passiveDns.GetCount-7c2c 3 params → 2XX4XX5XX
GET
/security/threatIntelligence/hosts/{host-id}/passiveDnsReverse
Microsoft Graph List passiveDnsReverse
security.threatIntelligence.hosts.ListPassiveDnsReverse 9 params → 2XX4XX5XX
GET
/security/threatIntelligence/hosts/{host-id}/passiveDnsReverse/{passiveDnsRecord-id}
Microsoft Graph Get passiveDnsReverse from security
security.threatIntelligence.hosts.GetPassiveDnsReverse 4 params → 2XX4XX5XX
GET
/security/threatIntelligence/hosts/{host-id}/passiveDnsReverse/$count
Microsoft Graph Get the number of the resource
security.threatIntelligence.hosts.passiveDnsReverse.GetCount-0421 3 params → 2XX4XX5XX
GET
/security/threatIntelligence/hosts/{host-id}/ports
Microsoft Graph List hostPorts
security.threatIntelligence.hosts.ListPorts 9 params → 2XX4XX5XX
GET
/security/threatIntelligence/hosts/{host-id}/ports/{hostPort-id}
Microsoft Graph Get ports from security
security.threatIntelligence.hosts.GetPorts 4 params → 2XX4XX5XX
GET
/security/threatIntelligence/hosts/{host-id}/ports/$count
Microsoft Graph Get the number of the resource
security.threatIntelligence.hosts.ports.GetCount-af86 3 params → 2XX4XX5XX
GET
/security/threatIntelligence/hosts/{host-id}/reputation
Microsoft Graph Get hostReputation
security.threatIntelligence.hosts.GetReputation 3 params → 2XX4XX5XX
PATCH
/security/threatIntelligence/hosts/{host-id}/reputation
Microsoft Graph Update the navigation property reputation in security
security.threatIntelligence.hosts.UpdateReputation 1 param body → 2XX4XX5XX
DELETE
/security/threatIntelligence/hosts/{host-id}/reputation
Microsoft Graph Delete navigation property reputation for security
security.threatIntelligence.hosts.DeleteReputation 2 params → 2044XX5XX
GET
/security/threatIntelligence/hosts/{host-id}/sslCertificates
Microsoft Graph List hostSslCertificates
security.threatIntelligence.hosts.ListSslCertificates 9 params → 2XX4XX5XX
GET
/security/threatIntelligence/hosts/{host-id}/sslCertificates/{hostSslCertificate-id}
Microsoft Graph Get sslCertificates from security
security.threatIntelligence.hosts.GetSslCertificates 4 params → 2XX4XX5XX
GET
/security/threatIntelligence/hosts/{host-id}/sslCertificates/$count
Microsoft Graph Get the number of the resource
security.threatIntelligence.hosts.sslCertificates.GetCount-eba7 3 params → 2XX4XX5XX
GET
/security/threatIntelligence/hosts/{host-id}/subdomains
Microsoft Graph List subdomains
security.threatIntelligence.hosts.ListSubdomains 9 params → 2XX4XX5XX
GET
/security/threatIntelligence/hosts/{host-id}/subdomains/{subdomain-id}
Microsoft Graph Get subdomains from security
security.threatIntelligence.hosts.GetSubdomains 4 params → 2XX4XX5XX
GET
/security/threatIntelligence/hosts/{host-id}/subdomains/$count
Microsoft Graph Get the number of the resource
security.threatIntelligence.hosts.subdomains.GetCount-67a8 3 params → 2XX4XX5XX
GET
/security/threatIntelligence/hosts/{host-id}/trackers
Microsoft Graph List trackers
security.threatIntelligence.hosts.ListTrackers 9 params → 2XX4XX5XX
GET
/security/threatIntelligence/hosts/{host-id}/trackers/{hostTracker-id}
Microsoft Graph Get trackers from security
security.threatIntelligence.hosts.GetTrackers 4 params → 2XX4XX5XX
GET
/security/threatIntelligence/hosts/{host-id}/trackers/$count
Microsoft Graph Get the number of the resource
security.threatIntelligence.hosts.trackers.GetCount-b20f 3 params → 2XX4XX5XX
GET
/security/threatIntelligence/hosts/{host-id}/whois
Microsoft Graph Get whoisRecord
security.threatIntelligence.hosts.GetWhois 3 params → 2XX4XX5XX
GET
/security/threatIntelligence/hosts/$count
Microsoft Graph Get the number of the resource
security.threatIntelligence.hosts.GetCount-5d36 2 params → 2XX4XX5XX
GET
/security/threatIntelligence/hostSslCertificates
Microsoft Graph Get hostSslCertificate
security.threatIntelligence.ListHostSslCertificates 8 params → 2XX4XX5XX
POST
/security/threatIntelligence/hostSslCertificates
Microsoft Graph Create new navigation property to hostSslCertificates for security
security.threatIntelligence.CreateHostSslCertificates body → 2XX4XX5XX
GET
/security/threatIntelligence/hostSslCertificates/{hostSslCertificate-id}
Microsoft Graph Get hostSslCertificate
security.threatIntelligence.GetHostSslCertificates 3 params → 2XX4XX5XX
PATCH
/security/threatIntelligence/hostSslCertificates/{hostSslCertificate-id}
Microsoft Graph Update the navigation property hostSslCertificates in security
security.threatIntelligence.UpdateHostSslCertificates 1 param body → 2XX4XX5XX
DELETE
/security/threatIntelligence/hostSslCertificates/{hostSslCertificate-id}
Microsoft Graph Delete navigation property hostSslCertificates for security
security.threatIntelligence.DeleteHostSslCertificates 2 params → 2044XX5XX
GET
/security/threatIntelligence/hostSslCertificates/{hostSslCertificate-id}/host
Microsoft Graph Get host from security
security.threatIntelligence.hostSslCertificates.GetHost 3 params → 2XX4XX5XX
GET
/security/threatIntelligence/hostSslCertificates/{hostSslCertificate-id}/sslCertificate
Microsoft Graph Get sslCertificate from security
security.threatIntelligence.hostSslCertificates.GetSslCertificate 3 params → 2XX4XX5XX
GET
/security/threatIntelligence/hostSslCertificates/$count
Microsoft Graph Get the number of the resource
security.threatIntelligence.hostSslCertificates.GetCount-a40b 2 params → 2XX4XX5XX
GET
/security/threatIntelligence/hostTrackers
Microsoft Graph Get hostTracker
security.threatIntelligence.ListHostTrackers 8 params → 2XX4XX5XX
POST
/security/threatIntelligence/hostTrackers
Microsoft Graph Create new navigation property to hostTrackers for security
security.threatIntelligence.CreateHostTrackers body → 2XX4XX5XX
GET
/security/threatIntelligence/hostTrackers/{hostTracker-id}
Microsoft Graph Get hostTracker
security.threatIntelligence.GetHostTrackers 3 params → 2XX4XX5XX
PATCH
/security/threatIntelligence/hostTrackers/{hostTracker-id}
Microsoft Graph Update the navigation property hostTrackers in security
security.threatIntelligence.UpdateHostTrackers 1 param body → 2XX4XX5XX
DELETE
/security/threatIntelligence/hostTrackers/{hostTracker-id}
Microsoft Graph Delete navigation property hostTrackers for security
security.threatIntelligence.DeleteHostTrackers 2 params → 2044XX5XX
GET
/security/threatIntelligence/hostTrackers/{hostTracker-id}/host
Microsoft Graph Get host from security
security.threatIntelligence.hostTrackers.GetHost 3 params → 2XX4XX5XX
GET
/security/threatIntelligence/hostTrackers/$count
Microsoft Graph Get the number of the resource
security.threatIntelligence.hostTrackers.GetCount-1b5a 2 params → 2XX4XX5XX
GET
/security/threatIntelligence/intelligenceProfileIndicators
Microsoft Graph Get intelligenceProfileIndicator
security.threatIntelligence.ListIntelligenceProfileIndicators 8 params → 2XX4XX5XX
POST
/security/threatIntelligence/intelligenceProfileIndicators
Microsoft Graph Create new navigation property to intelligenceProfileIndicators for security
security.threatIntelligence.CreateIntelligenceProfileIndicators body → 2XX4XX5XX
GET
/security/threatIntelligence/intelligenceProfileIndicators/{intelligenceProfileIndicator-id}
Microsoft Graph Get intelligenceProfileIndicator
security.threatIntelligence.GetIntelligenceProfileIndicators 3 params → 2XX4XX5XX
PATCH
/security/threatIntelligence/intelligenceProfileIndicators/{intelligenceProfileIndicator-id}
Microsoft Graph Update the navigation property intelligenceProfileIndicators in security
security.threatIntelligence.UpdateIntelligenceProfileIndicators 1 param body → 2XX4XX5XX
DELETE
/security/threatIntelligence/intelligenceProfileIndicators/{intelligenceProfileIndicator-id}
Microsoft Graph Delete navigation property intelligenceProfileIndicators for security
security.threatIntelligence.DeleteIntelligenceProfileIndicators 2 params → 2044XX5XX
GET
/security/threatIntelligence/intelligenceProfileIndicators/{intelligenceProfileIndicator-id}/artifact
Microsoft Graph Get artifact from security
security.threatIntelligence.intelligenceProfileIndicators.GetArtifact 3 params → 2XX4XX5XX
GET
/security/threatIntelligence/intelligenceProfileIndicators/$count
Microsoft Graph Get the number of the resource
security.threatIntelligence.intelligenceProfileIndicators.GetCount-9a16 2 params → 2XX4XX5XX
GET
/security/threatIntelligence/intelProfiles
Microsoft Graph List intelProfiles
security.threatIntelligence.ListIntelProfiles 8 params → 2XX4XX5XX
POST
/security/threatIntelligence/intelProfiles
Microsoft Graph Create new navigation property to intelProfiles for security
security.threatIntelligence.CreateIntelProfiles body → 2XX4XX5XX
GET
/security/threatIntelligence/intelProfiles/{intelligenceProfile-id}
Microsoft Graph Get intelligenceProfile
security.threatIntelligence.GetIntelProfiles 3 params → 2XX4XX5XX
PATCH
/security/threatIntelligence/intelProfiles/{intelligenceProfile-id}
Microsoft Graph Update the navigation property intelProfiles in security
security.threatIntelligence.UpdateIntelProfiles 1 param body → 2XX4XX5XX
DELETE
/security/threatIntelligence/intelProfiles/{intelligenceProfile-id}
Microsoft Graph Delete navigation property intelProfiles for security
security.threatIntelligence.DeleteIntelProfiles 2 params → 2044XX5XX
GET
/security/threatIntelligence/intelProfiles/{intelligenceProfile-id}/indicators
Microsoft Graph List indicators
security.threatIntelligence.intelProfiles.ListIndicators 9 params → 2XX4XX5XX
GET
/security/threatIntelligence/intelProfiles/{intelligenceProfile-id}/indicators/{intelligenceProfileIndicator-id}
Microsoft Graph Get indicators from security
security.threatIntelligence.intelProfiles.GetIndicators 4 params → 2XX4XX5XX
GET
/security/threatIntelligence/intelProfiles/{intelligenceProfile-id}/indicators/$count
Microsoft Graph Get the number of the resource
security.threatIntelligence.intelProfiles.indicators.GetCount-a1bc 3 params → 2XX4XX5XX
GET
/security/threatIntelligence/intelProfiles/$count
Microsoft Graph Get the number of the resource
security.threatIntelligence.intelProfiles.GetCount-4b06 2 params → 2XX4XX5XX
GET
/security/threatIntelligence/passiveDnsRecords
Microsoft Graph Get passiveDnsRecord
security.threatIntelligence.ListPassiveDnsRecords 8 params → 2XX4XX5XX
POST
/security/threatIntelligence/passiveDnsRecords
Microsoft Graph Create new navigation property to passiveDnsRecords for security
security.threatIntelligence.CreatePassiveDnsRecords body → 2XX4XX5XX
GET
/security/threatIntelligence/passiveDnsRecords/{passiveDnsRecord-id}
Microsoft Graph Get passiveDnsRecord
security.threatIntelligence.GetPassiveDnsRecords 3 params → 2XX4XX5XX
PATCH
/security/threatIntelligence/passiveDnsRecords/{passiveDnsRecord-id}
Microsoft Graph Update the navigation property passiveDnsRecords in security
security.threatIntelligence.UpdatePassiveDnsRecords 1 param body → 2XX4XX5XX
DELETE
/security/threatIntelligence/passiveDnsRecords/{passiveDnsRecord-id}
Microsoft Graph Delete navigation property passiveDnsRecords for security
security.threatIntelligence.DeletePassiveDnsRecords 2 params → 2044XX5XX
GET
/security/threatIntelligence/passiveDnsRecords/{passiveDnsRecord-id}/artifact
Microsoft Graph Get artifact from security
security.threatIntelligence.passiveDnsRecords.GetArtifact 3 params → 2XX4XX5XX
GET
/security/threatIntelligence/passiveDnsRecords/{passiveDnsRecord-id}/parentHost
Microsoft Graph Get parentHost from security
security.threatIntelligence.passiveDnsRecords.GetParentHost 3 params → 2XX4XX5XX
GET
/security/threatIntelligence/passiveDnsRecords/$count
Microsoft Graph Get the number of the resource
security.threatIntelligence.passiveDnsRecords.GetCount-a5be 2 params → 2XX4XX5XX
GET
/security/threatIntelligence/sslCertificates
Microsoft Graph List sslCertificates
security.threatIntelligence.ListSslCertificates 8 params → 2XX4XX5XX
POST
/security/threatIntelligence/sslCertificates
Microsoft Graph Create new navigation property to sslCertificates for security
security.threatIntelligence.CreateSslCertificates body → 2XX4XX5XX
GET
/security/threatIntelligence/sslCertificates/{sslCertificate-id}
Microsoft Graph Get sslCertificate
security.threatIntelligence.GetSslCertificates 3 params → 2XX4XX5XX
PATCH
/security/threatIntelligence/sslCertificates/{sslCertificate-id}
Microsoft Graph Update the navigation property sslCertificates in security
security.threatIntelligence.UpdateSslCertificates 1 param body → 2XX4XX5XX
DELETE
/security/threatIntelligence/sslCertificates/{sslCertificate-id}
Microsoft Graph Delete navigation property sslCertificates for security
security.threatIntelligence.DeleteSslCertificates 2 params → 2044XX5XX
GET
/security/threatIntelligence/sslCertificates/{sslCertificate-id}/relatedHosts
Microsoft Graph List relatedHosts
security.threatIntelligence.sslCertificates.ListRelatedHosts 9 params → 2XX4XX5XX
GET
/security/threatIntelligence/sslCertificates/{sslCertificate-id}/relatedHosts/{host-id}
Microsoft Graph Get relatedHosts from security
security.threatIntelligence.sslCertificates.GetRelatedHosts 4 params → 2XX4XX5XX
GET
/security/threatIntelligence/sslCertificates/{sslCertificate-id}/relatedHosts/$count
Microsoft Graph Get the number of the resource
security.threatIntelligence.sslCertificates.relatedHosts.GetCount-0b8e 3 params → 2XX4XX5XX
GET
/security/threatIntelligence/sslCertificates/$count
Microsoft Graph Get the number of the resource
security.threatIntelligence.sslCertificates.GetCount-cfbd 2 params → 2XX4XX5XX
GET
/security/threatIntelligence/subdomains
Microsoft Graph Get subdomain
security.threatIntelligence.ListSubdomains 8 params → 2XX4XX5XX
POST
/security/threatIntelligence/subdomains
Microsoft Graph Create new navigation property to subdomains for security
security.threatIntelligence.CreateSubdomains body → 2XX4XX5XX
GET
/security/threatIntelligence/subdomains/{subdomain-id}
Microsoft Graph Get subdomain
security.threatIntelligence.GetSubdomains 3 params → 2XX4XX5XX
PATCH
/security/threatIntelligence/subdomains/{subdomain-id}
Microsoft Graph Update the navigation property subdomains in security
security.threatIntelligence.UpdateSubdomains 1 param body → 2XX4XX5XX
DELETE
/security/threatIntelligence/subdomains/{subdomain-id}
Microsoft Graph Delete navigation property subdomains for security
security.threatIntelligence.DeleteSubdomains 2 params → 2044XX5XX
GET
/security/threatIntelligence/subdomains/{subdomain-id}/host
Microsoft Graph Get host from security
security.threatIntelligence.subdomains.GetHost 3 params → 2XX4XX5XX
GET
/security/threatIntelligence/subdomains/$count
Microsoft Graph Get the number of the resource
security.threatIntelligence.subdomains.GetCount-34a3 2 params → 2XX4XX5XX
GET
/security/threatIntelligence/vulnerabilities
Microsoft Graph Get vulnerability
security.threatIntelligence.ListVulnerabilities 8 params → 2XX4XX5XX
POST
/security/threatIntelligence/vulnerabilities
Microsoft Graph Create new navigation property to vulnerabilities for security
security.threatIntelligence.CreateVulnerabilities body → 2XX4XX5XX
GET
/security/threatIntelligence/vulnerabilities/{vulnerability-id}
Microsoft Graph Get vulnerability
security.threatIntelligence.GetVulnerabilities 3 params → 2XX4XX5XX
PATCH
/security/threatIntelligence/vulnerabilities/{vulnerability-id}
Microsoft Graph Update the navigation property vulnerabilities in security
security.threatIntelligence.UpdateVulnerabilities 1 param body → 2XX4XX5XX
DELETE
/security/threatIntelligence/vulnerabilities/{vulnerability-id}
Microsoft Graph Delete navigation property vulnerabilities for security
security.threatIntelligence.DeleteVulnerabilities 2 params → 2044XX5XX
GET
/security/threatIntelligence/vulnerabilities/{vulnerability-id}/articles
Microsoft Graph Get articles from security
security.threatIntelligence.vulnerabilities.ListArticles 9 params → 2XX4XX5XX
GET
/security/threatIntelligence/vulnerabilities/{vulnerability-id}/articles/{article-id}
Microsoft Graph Get articles from security
security.threatIntelligence.vulnerabilities.GetArticles 4 params → 2XX4XX5XX
GET
/security/threatIntelligence/vulnerabilities/{vulnerability-id}/articles/$count
Microsoft Graph Get the number of the resource
security.threatIntelligence.vulnerabilities.articles.GetCount-3551 3 params → 2XX4XX5XX
GET
/security/threatIntelligence/vulnerabilities/{vulnerability-id}/components
Microsoft Graph List components
security.threatIntelligence.vulnerabilities.ListComponents 9 params → 2XX4XX5XX
POST
/security/threatIntelligence/vulnerabilities/{vulnerability-id}/components
Microsoft Graph Create new navigation property to components for security
security.threatIntelligence.vulnerabilities.CreateComponents 1 param body → 2XX4XX5XX
GET
/security/threatIntelligence/vulnerabilities/{vulnerability-id}/components/{vulnerabilityComponent-id}
Microsoft Graph Get vulnerabilityComponent
security.threatIntelligence.vulnerabilities.GetComponents 4 params → 2XX4XX5XX
PATCH
/security/threatIntelligence/vulnerabilities/{vulnerability-id}/components/{vulnerabilityComponent-id}
Microsoft Graph Update the navigation property components in security
security.threatIntelligence.vulnerabilities.UpdateComponents 2 params body → 2XX4XX5XX
DELETE
/security/threatIntelligence/vulnerabilities/{vulnerability-id}/components/{vulnerabilityComponent-id}
Microsoft Graph Delete navigation property components for security
security.threatIntelligence.vulnerabilities.DeleteComponents 3 params → 2044XX5XX
GET
/security/threatIntelligence/vulnerabilities/{vulnerability-id}/components/$count
Microsoft Graph Get the number of the resource
security.threatIntelligence.vulnerabilities.components.GetCount-d51b 3 params → 2XX4XX5XX
GET
/security/threatIntelligence/vulnerabilities/$count
Microsoft Graph Get the number of the resource
security.threatIntelligence.vulnerabilities.GetCount-d2da 2 params → 2XX4XX5XX
GET
/security/threatIntelligence/whoisHistoryRecords
Microsoft Graph Get whoisHistoryRecords from security
security.threatIntelligence.ListWhoisHistoryRecords 8 params → 2XX4XX5XX
POST
/security/threatIntelligence/whoisHistoryRecords
Microsoft Graph Create new navigation property to whoisHistoryRecords for security
security.threatIntelligence.CreateWhoisHistoryRecords body → 2XX4XX5XX
GET
/security/threatIntelligence/whoisHistoryRecords/{whoisHistoryRecord-id}
Microsoft Graph Get whoisHistoryRecords from security
security.threatIntelligence.GetWhoisHistoryRecords 3 params → 2XX4XX5XX
PATCH
/security/threatIntelligence/whoisHistoryRecords/{whoisHistoryRecord-id}
Microsoft Graph Update the navigation property whoisHistoryRecords in security
security.threatIntelligence.UpdateWhoisHistoryRecords 1 param body → 2XX4XX5XX
DELETE
/security/threatIntelligence/whoisHistoryRecords/{whoisHistoryRecord-id}
Microsoft Graph Delete navigation property whoisHistoryRecords for security
security.threatIntelligence.DeleteWhoisHistoryRecords 2 params → 2044XX5XX
GET
/security/threatIntelligence/whoisHistoryRecords/{whoisHistoryRecord-id}/host
Microsoft Graph Get host from security
security.threatIntelligence.whoisHistoryRecords.GetHost 3 params → 2XX4XX5XX
GET
/security/threatIntelligence/whoisHistoryRecords/$count
Microsoft Graph Get the number of the resource
security.threatIntelligence.whoisHistoryRecords.GetCount-175e 2 params → 2XX4XX5XX
GET
/security/threatIntelligence/whoisRecords
Microsoft Graph List whoisRecords
security.threatIntelligence.ListWhoisRecords 8 params → 2XX4XX5XX
POST
/security/threatIntelligence/whoisRecords
Microsoft Graph Create new navigation property to whoisRecords for security
security.threatIntelligence.CreateWhoisRecords body → 2XX4XX5XX
GET
/security/threatIntelligence/whoisRecords/{whoisRecord-id}
Microsoft Graph Get whoisRecord
security.threatIntelligence.GetWhoisRecords 3 params → 2XX4XX5XX
PATCH
/security/threatIntelligence/whoisRecords/{whoisRecord-id}
Microsoft Graph Update the navigation property whoisRecords in security
security.threatIntelligence.UpdateWhoisRecords 1 param body → 2XX4XX5XX
DELETE
/security/threatIntelligence/whoisRecords/{whoisRecord-id}
Microsoft Graph Delete navigation property whoisRecords for security
security.threatIntelligence.DeleteWhoisRecords 2 params → 2044XX5XX
GET
/security/threatIntelligence/whoisRecords/{whoisRecord-id}/history
Microsoft Graph Get history from security
security.threatIntelligence.whoisRecords.ListHistory 9 params → 2XX4XX5XX
GET
/security/threatIntelligence/whoisRecords/{whoisRecord-id}/history/{whoisHistoryRecord-id}
Microsoft Graph Get history from security
security.threatIntelligence.whoisRecords.GetHistory 4 params → 2XX4XX5XX
GET
/security/threatIntelligence/whoisRecords/{whoisRecord-id}/history/$count
Microsoft Graph Get the number of the resource
security.threatIntelligence.whoisRecords.history.GetCount-86f0 3 params → 2XX4XX5XX
GET
/security/threatIntelligence/whoisRecords/{whoisRecord-id}/host
Microsoft Graph Get host from security
security.threatIntelligence.whoisRecords.GetHost 3 params → 2XX4XX5XX
GET
/security/threatIntelligence/whoisRecords/$count
Microsoft Graph Get the number of the resource
security.threatIntelligence.whoisRecords.GetCount-21a1 2 params → 2XX4XX5XX

Schemas 69

The contract defines 69 schemas that model the data the API accepts and returns. The most detailed are microsoft.graph.security.sslCertificateEntity (10 properties), microsoft.graph.security.whoisContact (7 properties), microsoft.graph.physicalAddress (6 properties), microsoft.graph.security.hostPortBanner (6 properties). Each schema is shown below with its type and property counts.

ODataCountResponse
integer
microsoft.graph.security.hostPort
microsoft.graph.security.host
microsoft.graph.ODataErrors.InnerError
object
4 properties 1 required
microsoft.graph.security.vulnerabilityCollectionResponse
object
microsoft.graph.security.article
microsoft.graph.security.threatIntelligence
microsoft.graph.security.indicatorSource
string
microsoft.graph.security.vulnerabilityComponentCollectionResponse
object
microsoft.graph.security.formattedContent
object
3 properties 1 required
microsoft.graph.security.hostComponentCollectionResponse
object
microsoft.graph.security.intelligenceProfileKind
string
microsoft.graph.ODataErrors.ErrorDetails
object
3 properties 2 required
microsoft.graph.security.hostReputationRule
object
5 properties 1 required
microsoft.graph.security.intelligenceProfileIndicator
microsoft.graph.security.hostCookieCollectionResponse
object
microsoft.graph.security.vulnerability
microsoft.graph.physicalAddress
object
6 properties 1 required
microsoft.graph.security.hostReputationRuleSeverity
string
microsoft.graph.security.intelligenceProfile
microsoft.graph.security.hostPairCollectionResponse
object
microsoft.graph.security.hostPortCollectionResponse
object
microsoft.graph.security.hostPortComponent
object
5 properties 1 required
microsoft.graph.security.hyperlink
object
3 properties 1 required
microsoft.graph.security.artifact
ReferenceNumeric
string
microsoft.graph.security.hostReputation
microsoft.graph.security.sslCertificateCollectionResponse
object
microsoft.graph.security.hostSslCertificatePort
object
4 properties 1 required
microsoft.graph.security.articleIndicatorCollectionResponse
object
microsoft.graph.entity
object
2 properties 1 required
microsoft.graph.security.sslCertificateEntity
object
10 properties 1 required
microsoft.graph.security.hostSslCertificate
microsoft.graph.security.cvssSummary
object
4 properties 1 required
microsoft.graph.security.hostTrackerCollectionResponse
object
microsoft.graph.security.passiveDnsRecord
microsoft.graph.security.intelligenceProfileIndicatorCollectionResponse
object
microsoft.graph.security.whoisRecordCollectionResponse
object
microsoft.graph.security.hostCollectionResponse
object
microsoft.graph.security.whoisRecord
microsoft.graph.security.whoisHistoryRecord
microsoft.graph.security.vulnerabilitySeverity
string
microsoft.graph.ODataErrors.MainError
object
5 properties 2 required
microsoft.graph.security.hostComponent
microsoft.graph.security.hostTracker
microsoft.graph.security.indicator
microsoft.graph.security.intelligenceProfileCollectionResponse
object
microsoft.graph.security.subdomain
microsoft.graph.security.whoisBaseRecord
microsoft.graph.security.sslCertificate
microsoft.graph.security.hostPair
microsoft.graph.ODataErrors.ODataError
object
1 property 1 required
microsoft.graph.security.hostCookie
microsoft.graph.security.whoisNameserver
object
4 properties 1 required
microsoft.graph.security.hostPortBanner
object
6 properties 1 required
microsoft.graph.security.hostPortStatus
string
microsoft.graph.security.contentFormat
string
microsoft.graph.security.intelligenceProfileCountryOrRegionOfOrigin
object
3 properties 1 required
microsoft.graph.security.whoisHistoryRecordCollectionResponse
object
microsoft.graph.security.hostSslCertificateCollectionResponse
object
microsoft.graph.security.hostPortProtocol
string
microsoft.graph.security.hostReputationClassification
string
microsoft.graph.security.vulnerabilityComponent
microsoft.graph.security.articleCollectionResponse
object
microsoft.graph.security.whoisContact
object
7 properties 1 required
microsoft.graph.security.subdomainCollectionResponse
object
BaseCollectionPaginationCountResponse
object
2 properties
microsoft.graph.security.passiveDnsRecordCollectionResponse
object
microsoft.graph.security.articleIndicator

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

microsoft-graph-security-threatintelligence-api-openapi.yml Raw ↑

Other APIs Microsoft Graph publishes across the network.

Microsoft Graph Admin.admin API
AE Profile APIs.io
Microsoft Graph admin.adminMicrosoft365Apps API
AE Profile APIs.io
Microsoft Graph admin.adminReportSettings API
AE Profile APIs.io
Microsoft Graph Admin Consent Policy API
AE Profile APIs.io
Microsoft Graph Admin.edge API
AE Profile APIs.io
Microsoft Graph admin.peopleAdminSettings API
AE Profile APIs.io
Microsoft Graph admin.serviceAnnouncement API
AE Profile APIs.io
Microsoft Graph Admin.sharepoint API
AE Profile APIs.io
Microsoft Graph Administration API
AE Profile APIs.io
Microsoft Graph Administrative Units API
AE Profile APIs.io
Microsoft Graph Agreement Acceptances API
AE Profile APIs.io
Microsoft Graph Agreement File Localizations API
AE Profile APIs.io
← Back to M APIs
API Details
ID
microsoft-graph:microsoft-graph-security-threatintelligence-api
Base URL
https://graph.microsoft.com/v1.0
Docs
https://learn.microsoft.com/en-us/graph/api/resources/admin?view=graph-rest-1.0
Provider
Microsoft Graph
APIs.io →  GitHub →
Explore more
All APIs Providers APIs.io Network
Work with this as data

Every API here is available over the API and to AI agents over MCP. APIs is not yet its own endpoint on the v1 API. Reach this content through network search and the tag graph, or the MCP server below.

Installs https://mcp.apievangelist.com/mcp in Claude, Cursor, VS Code and the rest — one button, every client.

MCP tools for apis
4 tools reach this content
  • search_api_evangelistSearch every content type across the network at once.
  • find_relatedThe shared-tag relevance graph — what else covers this.
  • get_tagEverything one tag labels, across all content types.
  • guide_topicPRO — a curated bundle for a topic: area, guidance, rules, papers, stories, services.
All tools & prompts
Call it yourself
curl for this page
Search the network for this 
curl "https://api.apievangelist.com/v1/search?q=microsoft-graph-security-threatintelligence-api&limit=10"
Everything under a tag 
curl "https://api.apievangelist.com/v1/tags/microsoft-graph-security-threatintelligence-api"

Discovery needs no key. Full bodies and the synthesis endpoints are Pro.

Get an API key

Free tier, no email required. Sign in with whichever identity you already have.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have. Your account

Where this information came from

This is an independent, third-party profile of Microsoft Graph security.threatIntelligence API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.