Incidents

View security alerts from your Microsoft 365 tenants.

List Alerts shows summary of the number of alerts across your managed Microsoft 365 tenants plus a detailed list of the actual alerts. You can also set the state of these alerts and view them directly in the Microsoft portals

Table Details

The properties returned are for the Graph resource type incident. For more information on the properties please see the Graph documentation.

Table Filtering

The top section will allow you to filter for specific dates that you want to review. Select the start date and end date for the results you would like to receive. Leave a date blank to receive all results before/after that date, respectively.

Table Actions

Action	Description	Bulk Action Available
Assign to self	Assigns the incident in Entra to yourself
Set status to active	Sets the status to active from the current status
Set status to in progress	Sets the status to in progress from the current status
Set status to resolved	Set the status to resolved from the current status
More info	Opens the Extended Info flyout

---

Feature Requests / Ideas

We value your feedback and ideas. Please raise any feature requests on GitHub.