REST messages for the Microsoft Threat and Vulnerability Management Vulnerability Integration

REST messages for the Microsoft Threat and Vulnerability Management (MS TVM) Vulnerability Integration enable API calls to MS TVM for retrieving vulnerability data, security recommendations, and asset information.

Supported cloud environments

Note: The integrations support commercial cloud environments by default. For non-commercial environments (GCC High, DoD), see the Knowledge Base article KB3141167.

MS TVM access token

To authenticate REST API requests, use the REST messages for the MS TVM access token to retrieve the access token from the MS TVM API. Changes to the record method of the REST message impact the authentication requests made to MS TVM.

MS TVM integration

Use the REST message for the MS TVM integration to retrieve information from MS TVM. Changes to the record method impact the requests made to the API. REST messages contain the following REST methods:

REST method Description GET vulnerabilities Retrieves vulnerability and exploit information from MS TVM. GET Software Vulnerabilities by Machine Retrieves all open vulnerabilities. GET recommendations Retrieves the list of all actionable security recommendations that affect the organization. GET machines Retrieves the collection of assets. GET Software Vulnerabilities changes by Machine Retrieves information that has changed in the full vulnerability import of the organization, including new, fixed, and updated vulnerabilities.