Security Data Sidepanel

Fetches Defender portal API data into searchable tables with export capabilities.

Security Data Fetcher Side panel for the Microsoft Defender portal. It uses the browser session you already have on security.microsoft.com and loads portal data into tables you can sort, filter, page, and export. What you can do Open one assessment area at a time. Each area is a tab. Fetch the queries on the current tab, or use Fetch All to run every visible tab. Hide and reorder tabs from Configure. Hidden tabs stay out of the tab bar and out of Fetch All. The layout is remembered. Reset restores the alphabetical default. Download a query as JSON or CSV, or save an HTML report, all JSON files, or all CSV files from the header. Device Timeline needs a device ID and a date range. File Profile needs a file hash. The other tabs fetch as soon as you run them. Tabs Default order is alphabetical. Tab What it covers Action Center History Remediation actions and statistics Alert Analysis Alert volume by title ASR Attack surface reduction configuration and detections Cloud Apps Defender for Cloud Apps connectors Custom Data Collection Custom collection rules Custom Detection Custom detection rules Data Usage Sentinel ingestion and which tables hunting queries touch Detection Performance Scheduled hunting rule runtime Device Timeline Events for one device File Profile File reputation by hash Inventory Exclusions, machine groups, and asset rules MDE Settings Defender for Endpoint tenant settings MDI Defender for Identity sensors, sensitive entities, and exclusions Schema Advanced hunting tables SecurityPolicies Intune security policies