manage_alerts
List and retrieve security alerts from Microsoft Defender and other security products for investigation and remediation.
Instructions
Manage security alerts from Microsoft Defender and other security products including investigation and remediation.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| action | Yes | Alert management action | |
| alertId | No | ID of the alert (required for get_alert) | |
| filter | No | OData filter string (e.g., 'status eq \'new\'') | |
| top | No | Maximum number of alerts to return |