Connectors
...
Actions
Get Alert User Information
6 min
description retrieve detailed user information linked to a specific microsoft defender alert by using the unique alert id endpoint url /api/alerts/{{id}}/user method get inputs path parameters (object) – required id (string) – required output example \[ { "status code" 404, "response headers" { "date" "thu, 04 may 2023 13 19 32 gmt", "content type" "application/json; charset=utf 8", "transfer encoding" "chunked", "connection" "keep alive", "content encoding" "deflate", "vary" "accept encoding", "strict transport security" "max age=15724800; includesubdomains" }, "reason" "not found", "json body" { "error" { "code" "resourcenotfound", "message" "there is no user related to alert ar638180599315648136 73827727", "target" "|f712eef2 447d37a1beaf6d2b " } } } ] output parameters status code (number) reason (string) json body (object) error (object) code (string) message (string) target (string) response headers header type date string content type string transfer encoding string connection string content encoding string vary string strict transport security string