List malwareRiskEvents

Retrieve a list of malwareriskevent objects.

Prerequisites

The following scopes are required to execute this API: IdentityRiskEvent.Read.All

HTTP request

GET /malwareRiskEvents

Request headers

Name Description
Authorization Bearer {token}. Required.
Workbook-Session-Id Workbook session Id that determines if changes are persisted or not. Optional.

Request body

Do not supply a request body for this method.

Response

If successful, this method returns a 200 OK response code and collection of malwareRiskEvent objects in the response body.

Example

Request

Here is an example of the request.

GET https://graph.microsoft.com/v1.0/malwareRiskEvents
Response

Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.

HTTP/1.1 200 OK
Content-type: application/json
Content-length: 303

{
  "value": [
    {
      "malwareName": "CONFICKER",
      "closedDateTime": null,
      "createdDateTime": "2016-02-03T06:06:01.940814Z",
      "deviceInformation": "N62DFY07OW",
      "id": "1d28fe9a-3b26-a2e2-67b9-150de48ce63c-eb5f4d94-faae-cdac-ec0a-29a7d2f95dea-5e497221-a92d-7a29-5c47-4f9d8d901de8",
      "ipAddress": "95.31.18.119",
      "location": "Moskva, Russia, RU",
      "riskEventDateTime": "2016-02-03T05:20:33.7208156Z",
      "riskEventStatus": "active",
      "riskLevel": "low",
      "riskType": "MalwareRiskEvent",
      "userDisplayName": "Jon Doe",
      "userId": "eb5f4d94-faae-cdac-ec0a-29a7d2f95dea",
      "userPrincipalName": "jon@contoso.com"
    }
  ]
}