Get Alert
Get alert information by ID. One of the following permissions is required to run this action:
Alert.Read.AllAlert.ReadWrite.AllAlert.ReadAlert.ReadWrite
External Documentation
To learn more, visit the Microsoft Defender For Endpoints documentation.
Parameters
| Parameter | Description |
|---|---|
| Alert ID | Your alert ID, can be retrieved from the 'List Alerts' action. |
Workflow Library Example
Get Alert with Microsoft Defender for Endpoints and Send Results Via Email
Preview this Workflow on desktop