Guillaume BOURGEOIS 811a85424b feat(microsoft-defender-endpoint): new Defender for Endpoint integration ...

22 commands (Security Center API): alert ingestion + triage, machine
isolate/unisolate, restrict/unrestrict app execution, AV scan, stop &
quarantine file, collect investigation package, offboard, tag, list
machine actions, advanced hunting (KQL), and custom indicators. Azure
AD OAuth 2.0 client-credentials, stdlib-only.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-11 22:22:45 +02:00

..

incident-types

feat(microsoft-defender-endpoint): new Defender for Endpoint integration

2026-07-11 22:22:45 +02:00

mappers

feat(microsoft-defender-endpoint): new Defender for Endpoint integration

2026-07-11 22:22:45 +02:00

scripts

feat(microsoft-defender-endpoint): new Defender for Endpoint integration

2026-07-11 22:22:45 +02:00

manifest.yaml

feat(microsoft-defender-endpoint): new Defender for Endpoint integration

2026-07-11 22:22:45 +02:00