Forum Discussion

SergioT1228's avatar
SergioT1228
Brass Contributor
Mar 14, 2024

Connect Swimlane to pull Defender for Cloud Alerts

using Swimlane to ingest our alerts from Defender for cloud, I have setup our Access with the following items:

 

URL: https://management.azure.com/subscriptions/{subscriptionId}/providers/Microsoft.Security/alerts?api-version=2022-01-01https://graph.microsoft.com/v1.0/security/alerts

Token URL: https://login.microsoftonline.com/tenant-ID/oauth2/v2.0/token

Client ID: pulled from Registered App

Client Secret: Created a New Ceretificates & secrets and added that Value

Scope: https://graph.microsoft.com/.default

 

When I run my Action to capture the "List of Alerts", I receive the following error:

"reason": "Bad Request",
"json_body": {
"error": "invalid_request",
"error_description": "AADSTS90014: The required field 'scope' is missing from the credential. Ensure that you have all the necessary parameters for the login request...."

 

What parameters and how are those added and to which section?  I'm new to API calls and not sure of the process. 

 

Appreciate your help,

Serge

No RepliesBe the first to reply

Resources