You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/sentinel/soc-optimization/soc-optimization-api.md
+6-5Lines changed: 6 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -20,9 +20,9 @@ appliesto:
20
20
21
21
# Use SOC optimizations programmatically (Preview)
22
22
23
-
Use the Microsoft Sentinel `recommendations` API to programmatically interact with SOC optimization recommendations, helping you to close coverage gaps against specific threats and tighten ingestion rates. You can get details about all current recommendations across your workspaces or a specific SOC optimization recommendation, or you can reevaluate a recommendation if you've made changes in your environment.
23
+
Use the Microsoft Sentinel *[`recommendations`](/rest/api/securityinsights/get-recommendations/list)* API to programmatically interact with SOC optimization recommendations, helping you to close coverage gaps against specific threats and tighten ingestion rates. You can get details about all current recommendations across your workspaces or a specific SOC optimization recommendation, or you can reevaluate a recommendation if you've made changes in your environment.
24
24
25
-
For example, use the `recommendations` API to:
25
+
For example, use the *[`recommendations`](/rest/api/securityinsights/get-recommendations/list)* API to:
26
26
27
27
- Build custom reports and dashboards. For example, see [Visualize custom SOC optimization data](#visualize-custom-soc-optimization-data).
28
28
- Integrate with third-party tools, such as for SOAR and ITSM services
@@ -33,11 +33,11 @@ For customers or MSSPs managing multiple environments, the `recommendations` API
> The `recommendations` API is in **PREVIEW**. See the [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) for additional legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
36
+
> The [`recommendations`](/rest/api/securityinsights/get-recommendations/list) API is in **PREVIEW** and uses version *2024-01-01-preview* or later. See the [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) for additional legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
37
37
38
38
## Get, update, or reevaluate recommendations
39
39
40
-
Use the following examples of the `recommendations` API to interact with SOC optimization recommendations programmatically:
40
+
Use the following examples of the [`recommendations`](/rest/api/securityinsights/get-recommendations/list)` API to interact with SOC optimization recommendations programmatically:
41
41
42
42
-**Get a list of all current SOC optimization recommendations in your workspace**:
43
43
@@ -67,7 +67,7 @@ Use the following examples of the `recommendations` API to interact with SOC opt
67
67
68
68
## Visualize custom SOC optimization data
69
69
70
-
The **Microsoft Sentinel Optimization Workbook** uses the `recommendations` API to visualize SOC optimization data. Install and customize the workbook in your workspace to create your own custom SOC optimization dashboard.
70
+
The **Microsoft Sentinel Optimization Workbook** uses the [`recommendations`](/rest/api/securityinsights/get-recommendations/list) API to visualize SOC optimization data. Install and customize the workbook in your workspace to create your own custom SOC optimization dashboard.
71
71
72
72
In the **Microsoft Sentinel Optimization Workbooks**, select the **SOC Optimization** tab and expand the items under **Details** to drill down into to view SOC optimization data. Edit the workbook to modify the data shown as needed for your organization.
73
73
@@ -86,4 +86,5 @@ For more information, see:
86
86
87
87
- [Optimize your security operations](soc-optimization-access.md)
88
88
- [SOC optimization reference of recommendations](soc-optimization-reference.md)
89
+
- [Get Recommendations REST API reference](/rest/api/securityinsights/get-recommendations/list)
89
90
- Blogs: [Introducing the SOC Optimization API](https://aka.ms/SocOptimizationAPI) | [Unlock the power of precision-driven security management](https://aka.ms/SOC_Optimization)
0 commit comments