Summary
If you’re going to be managing multiple tenants, or want to otherwise programmatically manage as much as possible, you’re going to want to start mastering the APIs available for Microsoft 365 Defender and its associated services.
That’s why, in this chapter, you learned about the five main APIs available, and the kinds of operations each exposes:
- The Microsoft Graph security API
- Microsoft 365 Defender APIs
- Microsoft Defender for Endpoint APIs
- The Microsoft Defender for Cloud Apps API
- The Office 365 Management Activity API
As a rule, if it’s in Microsoft Graph, use it there to centralize efforts and stick with where Microsoft appears to be focusing most. However, you’ll still find lots in the other APIs only. Most of the APIs focus on operations of Microsoft 365 Defender rather than settings management, but hopefully, we’ll see this change over time so more things can be automated and managed as code...
