You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/defender-for-cloud/subassessment-rest-api.md
+6-6Lines changed: 6 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -4,7 +4,7 @@ title: Container vulnerability assessments powered by Microsoft Defender Vulnera
4
4
description: Learn about container vulnerability assessments powered by Microsoft Defender Vulnerability Management subassessments
5
5
author: dcurwin
6
6
ms.author: dacurwin
7
-
ms.date: 09/11/2023
7
+
ms.date: 09/18/2023
8
8
ms.topic: how-to
9
9
---
10
10
@@ -15,15 +15,15 @@ ms.topic: how-to
15
15
Azure Resource Graph (ARG) provides a REST API that can be used to pragmatically access vulnerability assessment results for both Azure registry and runtime vulnerabilities recommendations.
16
16
Learn more about [ARG references and query examples](/azure/governance/resource-graph/overview).
17
17
18
-
Azure container registry vulnerabilities sub assessments are published to ARG as part of the security resources. For more information see:
18
+
Azure container registry vulnerabilities sub assessments are published to ARG as part of the security resources. For more information, see:
-[Generic Security Sub Assessment Query](/azure/governance/resource-graph/samples/samples-by-category?tabs=azure-cli#list-container-registry-vulnerability-assessment-results)
21
21
22
-
## ARG Query Examples
22
+
## ARG query examples
23
23
24
24
To pull specific sub assessments, you need the assessment key. For Container vulnerability assessment powered by MDVM the key is `c0b7cfc6-3172-465a-b378-53c7ff2cc0d5`.
25
25
26
-
The following is a generic security sub assessment query example which can be used as an example to build queries with. This query pulls the first sub assessment generated in the last hour.
26
+
The following is a generic security sub assessment query example that can be used as an example to build queries with. This query pulls the first sub assessment generated in the last hour.
27
27
```kql
28
28
securityresources
29
29
| where type =~ "microsoft.security/assessments/subassessments" and properties.additionalData.assessedResourceType == "AzureContainerRegistryVulnerability"
@@ -32,7 +32,7 @@ securityresources
32
32
| extend timeGenerated = properties.timeGenerated
33
33
| where timeGenerated > ago(1h)
34
34
```
35
-
### Query Result
35
+
### Query result
36
36
```json
37
37
[
38
38
{
@@ -187,7 +187,7 @@ securityresources
187
187
188
188
### AzureContainerRegistryVulnerability (MDVM)
189
189
190
-
Additional context fields for Azure container registry vulnerability assessment
190
+
Other context fields for Azure container registry vulnerability assessment
0 commit comments