How to get Exposed Paths of a security recommendation via API of MS 365 Defender

masayuky 1 Reputation point
2021-12-17T04:42:44.05+00:00

Hi, I sometimes found devices that have Exposure level 'High' and checked the reason.
From Microsoft 365 Defender UI, I can find out some files that I have to handle by clicking one of the security recommendations here;
For example, regarding Apache Log4j vulnerabilities, I found 2 jar files by checking "Exposed paths".

But I can't find them via API of Microsoft Defender... Does anyone know where is the proper API to get the Exposed Paths of a security recommendation?

best regards,

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,183 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. JamesTran-MSFT 36,351 Reputation points Microsoft Employee
    2021-12-21T18:26:41.09+00:00

    @masayuky
    Thank you for your time and patience throughout this issue!

    As mentioned by @Lu Dai-MSFT , this issue is more related to Microsoft Defender for Endpoint so I'd recommend reaching out to their experts via their Support Process, or through their Microsoft Defender for Endpoint Tech Community for a more detailed response.

    From my research, I found some API documentation that might help with your issue, which I'll share below. However, based off your post it sounds like you might've been using the - List exposed devices of one remediation activity API to get the "exposed paths". For more info.

    Additional Links:
    Tutorial for using Microsoft Defender for Endpoint APIs
    Supported Microsoft Defender for Endpoint APIs

    If you have any other questions, please let me know.
    Thank you for your time and patience throughout this issue.

    ----------

    Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

    0 comments