# Get Started as Microsoft Security Developer 

Welcome to the Microsoft Security Dev repository! This repository is a landing page to learn about  Microsoft security APIs, services and communities. This will enable application developers to build security applications catering to different requirements. Furthermore, this repo is a starting point to share code, libraries, notebooks, workbooks, and queries for building connected experiences. 

Read the [blogpost](https://aka.ms/securitydevblogpost) for more details.

Feedback / Questions / Bugs to report? File [issues](https://github.com/Microsoft/securitydev/issues)

# In this repository
* [Microsoft security samples for connected experiences](https://github.com/Microsoft/securitydev/tree/master/Samples)

# Getting Started
Read the [Developers Guide to Building Connected Security Solutions](https://aka.ms/securitydevwhitepaper).  
The Developers Guide to Building Connected Security Solutions offers a primer for those who want to build apps, workflows, and analytics that integrate with Microsoft security solutions. In addition to introducing to the Microsoft APIs, services, and communities available to developers, the guide offers detailed guidance on when and how to use each – what technology and integration option best aligns with your desired scenario and application type. 


# Discover APIs and Services  
<table BORDER="1" CELLPADDING="10" class="myTable">
    <thead>
        <col>
        <colgroup span="6"></colgroup>
        <tr style="background-color:DarkOrange;">
            <th rowspan="2" scope="col" style="min-width: 7em;"><h3>APIs</h3></th>
            <th colspan="6" scope="colgroup"><h3>INTEGRATION OPTIONS</h3></th>
        </tr>
        <tr style="background-color:DarkOrange;">
            <th>&nbsp;&nbsp;&nbsp;SDK&nbsp;&nbsp;&nbsp;</th>
            <th><a href="https://docs.microsoft.com/azure/sentinel/">Azure Sentinel</a> Data Connector/ Dashboard</th>
            <th><a href="https://azure.microsoft.com/services/logic-apps/">Logic Apps</a> / <a href="https://flow.microsoft.com/">Flow</a> / <a href="https://powerapps.microsoft.com/">PowerApps</a> Connector</th>
            <th><a href="https://docs.microsoft.com/powershell/">PowerShell</a> Module</th>
            <th><a href="https://powerbi.microsoft.com/">Power BI</a> Connector</th>
            <th><a href="https://docs.microsoft.com/azure/notebooks/">Azure</a> / <a href="https://jupyter.org/">Jupyter</a> Notebooks</th>
        </tr>
    </thead>
    <tbody >
        <tr>
            <td >
                <a href="https://docs.microsoft.com/graph/security-concept-overview">Microsoft Graph Security API</a><br>unified alerts for <b>all Microsoft security services</b>, threat indicators, actions, and secure score
            </td>
            <td align="center">&#10003;</td>
            <td align="center">&#10003;</td>
            <td align="center">&#10003;</td>
            <td align="center">&#10003;</td>
            <td align="center">&#10003;</td>
            <td align="center">&#10003;</td>
        </tr>
        <tr>
            <td>
                <a href="https://docs.microsoft.com/rest/api/securitycenter/">Azure Security Center</a><br>security posture assessment and threat protection
            </td>
            <td align="center"></td>
            <td align="center">&#10003;</td>
            <td align="center">&#10003;</td>
            <td align="center">&#10003;</td>
            <td align="center"></td>
            <td align="center"></td>
        </tr>
        <tr>
            <td>
                <a href="https://docs.microsoft.com/azure/active-directory/identity-protection/graph-get-started">Azure Active Directory Identity Protection</a><br>AAD users, groups, risky users, and risky sign-ins
            </td>
            <td align="center">&#10003;</td>
            <td align="center">&#10003;</td>
            <td align="center"></td>
            <td align="center"></td>
            <td align="center"></td>
            <td align="center"></td>
        </tr>
        <tr>
            <td>
                <a href="https://dev.loganalytics.io/">Azure Sentinel / Azure Log Analytics</a><br>events and logs
            </td>
            <td align="center"></td>
            <td align="center">&#10003;</td>
            <td align="center">&#10003;</td>
            <td align="center">&#10003;</td>
            <td align="center"></td>
            <td align="center">&#10003;</td>
        </tr>
        <tr>
            <td>
                <a href="https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/use-apis">Microsoft Defender Advanced Threat Protection</a><br>networks, devices, files and device users, threat indicators and advanced hunting APIs
            </td>
            <td align="center">&#10003;</td>
            <td align="center"></td>
            <td align="center">&#10003;</td>
            <td align="center"></td>
            <td align="center">&#10003;</td>
            <td align="center">&#10003;</td>
        </tr>
        <tr>
            <td>
                <a href="https://docs.microsoft.com/cloud-app-security/api-tokens">Microsoft Cloud App Security</a><br>user activities, policy reports across cloud services
            </td>
            <td align="center"></td>
            <td align="center">&#10003;</td>
            <td align="center">&#10003;</td>
            <td align="center">&#10003;</td>
            <td align="center"></td>
            <td align="center"></td>
        </tr>
        <tr>
            <td>
                <a href="https://docs.microsoft.com/information-protection/develop/overview">Microsoft Information Protection</a><br>data classification, labeling, and protection
            </td>
            <td align="center">&#10003;</td>
            <td align="center">&#10003;</td>
            <td align="center"></td>
            <td align="center"></td>
            <td align="center"></td>
            <td align="center"></td>
        </tr>
        <tr>
            <td>
                <a href="https://docs.microsoft.com/office/office-365-management-api/office-365-management-apis-overview">Office 365 Management</a><br>user, admin, system, and policy actions and events across M365 services
            </td>
            <td align="center"></td>
            <td align="center">&#10003;</td>
            <td align="center"></td>
            <td align="center"></td>
            <td align="center"></td>
            <td align="center"></td>
        </tr>
    </tbody>
</table>

 
# Other security communities 
* [Microsoft Graph Security API](https://github.com/microsoftgraph/security-api-solutions)
* [Azure Sentinel](https://github.com/Azure/Azure-Sentinel)
* [Windows Defender ATP](https://github.com/Microsoft/WindowsDefenderATP-Hunting-Queries) 
* [Azure Security Center](https://github.com/Microsoft/Azure-Security-Center)

# Contributing

This project welcomes contributions and suggestions.  Most contributions require you to agree to a
Contributor License Agreement (CLA) declaring that you have the right to, and actually do, grant us
the rights to use your contribution. For details, visit https://cla.microsoft.com.

When you submit a pull request, a CLA-bot will automatically determine whether you need to provide
a CLA and decorate the PR appropriately (e.g., label, comment). Simply follow the instructions
provided by the bot. You will only need to do this once across all repos using our CLA.

This project has adopted the [Microsoft Open Source Code of Conduct](https://opensource.microsoft.com/codeofconduct/).
For more information see the [Code of Conduct FAQ](https://opensource.microsoft.com/codeofconduct/faq/) or
contact [opencode@microsoft.com](mailto:opencode@microsoft.com) with any additional questions or comments.

# License
This repository is licensed with the [MIT](https://github.com/microsoftgraph/security-api-solutions/blob/master/LICENSE) license.