Hello Community,
we want to create incidents in ServiceNow from MS Defender incidents dashboard thru API queries.
So basically we want to query MS Defender via API, get the incidents from MS Defender dashboard, and create the incident in ServicwNow.
Once the incident is resolved in ServiceNow, it would also be resolved in MS Defender.
We don't have any SecOps module in ServiceNow, have somebody been able to this with just API access?
Thanks!
