search

o365soa / soa

Public SOA modules and information
41 stars 18 forks source link

Modify the permission used by enterprise application for running Advanced Hunting queries #94

Closed jonade closed 4 months ago

jonade commented 5 months ago

The ThreatHunting.Read.All role is used to run AH queries using Graph - https://learn.microsoft.com/en-us/graph/api/security-security-runhuntingquery?view=graph-rest-1.0&tabs=http