Microsoft Defender · json
Microsoft Defender for Endpoint alerts API
Alert objects describe a detection and its workflow state in Defender for Endpoint.
Log sources tagged edr
Log sources tagged edr. Browse source profiles associated with edr.
Matching source profiles
CrowdStrike · json
CrowdStrike Falcon event stream
Falcon event-stream objects carry a metadata envelope and an event-specific payload.