Microsoft Defender · json
Microsoft Defender for Endpoint alerts API
Alert objects describe a detection and its workflow state in Defender for Endpoint.
Log sources tagged alerts
Log sources tagged alerts. Browse source profiles associated with alerts.
Matching source profiles
CrowdStrike · json
CrowdStrike Falcon event stream
Falcon event-stream objects carry a metadata envelope and an event-specific payload.