> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Update Alert

Updates properties of existing Alert.

The following permissions are required to run this action:

* `Alert.Read.All`
* `Alert.ReadWrite.All`

<Note>
  External Documentation

  To learn more, visit the [Microsoft Defender For Endpoints documentation](https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/api/get-alert-info-by-id?view=o365-worldwide).
</Note>

## Parameters

<div className="integrations-table">
  | Parameter      | Description                                                                                             |
  | -------------- | ------------------------------------------------------------------------------------------------------- |
  | Alert ID       | Your alert ID, can be retrieved from the 'List Alerts' action.                                          |
  | Alert Owner    | The mail address of the alert owner.                                                                    |
  | Classification | Specifies the specification of the alert.                                                               |
  | Comment        | Comment to be added to the alert.                                                                       |
  | Determination  | Specifies the determination of the alert.                                                               |
  | Status         | Specifies the current status of the alert. The property values are: 'New', 'InProgress' and 'Resolved'. |
</div>

## Example Output

```json theme={"dark"}
{
	"status": "Resolved",
	"assignedTo": "secop2@contoso.com",
	"classification": "FalsePositive",
	"determination": "Malware",
	"comment": "Resolve my alert and assign to secop2"
}
```

## Workflow Library Example

[Update Alert with Microsoft Defender for Endpoints and Send Results Via Email](https://library.blinkops.com/workflows/update-alert-with-microsoft-defender-for-endpoints-and-send-results-via-email)

<div className="iframe-wrapper">
  <div className="iframe-media">
    <img src="https://mintcdn.com/blinkops-2/ojHYuDeYX5FWuN8a/img/Icons/play-box.svg?fit=max&auto=format&n=ojHYuDeYX5FWuN8a&q=85&s=b8af968e71438a9499c3223c9bd29fb2" alt="Workflow Library" width="16" height="16" data-path="img/Icons/play-box.svg" />

    Preview this Workflow on desktop
  </div>

  <iframe className="iframe" src="https://library.blinkops.com/workflows/update-alert-with-microsoft-defender-for-endpoints-and-send-results-via-email/canvas" />
</div>