Microsoft Graph Search

Details

ID	`Microsoft Graph Search`
Provider	Microsoft
Category	Cloud Services
From Version	6.0.0
Docker Image	`demisto/crypto:1.0.0.5490413`
Supported Modules	Agentix Cloud Runtime Security XSIAM EDR Cortex Cloud

README

Use the Microsoft Search API in Microsoft Graph to search content stored in OneDrive or SharePoint: files, folders, lists, list items, or sites.

Configure Microsoft Graph Search in Cortex

Parameter	Description	Required
ID or Client ID		True
Token or Tenant ID		True
Key or Client Secret (can be used instead of Certificate Thumbprint and Private Key)		False
Certificate Thumbprint (can be used instead of Client Secret)		False
Private Key		False
Authorization code		True
Application redirect URI		True
Trust any certificate (not secure)		False
Use system proxy settings		False

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

msgraph-search-test

Tests connectivity.

Base Command

msgraph-search-test

msgraph-search-content

Use the Microsoft Search API in Microsoft Graph to search content stored in OneDrive or SharePoint: files, folders, lists, list items, or sites.

Base Command

msgraph-search-content

Input

Argument Name	Description	Required
query_string	Represents a (text string) search query that contains search terms and optional filters.	Required
entity_type	One or more types of resources expected in the response. . Possible values are: list, site, listItem, message, event, drive, driveItem, externalItem.	Required

Context Output

Path	Type	Description
SearchContent	unknown	OneDrive or SharePoint content returned from the search

msgraph-search-generate-login-url

Generate the login url used for Authorization code flow.

Base Command

msgraph-search-generate-login-url

Input

| Argument Name | Description | Required |
| — | — | — |

Context Output

There is no context output for this command.

Configuration parameters

creds_auth_id — (required)
creds_refresh_token — (required)
creds_enc_key —
creds_certificate — Certificate Thumbprint (can be used instead of Client Secret)
private_key — Private Key
creds_auth_code —
redirect_uri — Application redirect URI (required)
insecure — Trust any certificate (not secure)
proxy — Use system proxy settings

Commands (3)

msgraph-search-content
Use the Microsoft Search API in Microsoft Graph to search content stored in OneDrive or SharePoint: files, folders, lists, list items, or sites.
msgraph-search-generate-login-url
Generate the login url used for Authorization code flow.
msgraph-search-test
Tests connectivity.

Source

MicrosoftGraphSearch.py MicrosoftGraphSearch.yml MicrosoftGraphSearch_description.md

Download History Raw

category: Cloud Services
provider: Microsoft
sectionorder:
- Connect
commonfields:
  id: Microsoft Graph Search
  version: -1
configuration:
- display: ""
  displaypassword: ID or Client ID
  hiddenusername: true
  name: creds_auth_id
  required: true
  type: 9
  section: Connect
- display: ""
  displaypassword: Token or Tenant ID
  hiddenusername: true
  name: creds_refresh_token
  required: true
  type: 9
  section: Connect
- display: ""
  displaypassword: Key or Client Secret (can be used instead of Certificate Thumbprint and Private Key)
  hiddenusername: true
  name: creds_enc_key
  type: 9
  required: false
  section: Connect
- display: Certificate Thumbprint (can be used instead of Client Secret)
  displaypassword: Private Key
  name: creds_certificate
  type: 9
  required: false
  section: Connect
- additionalinfo: Used for certificate authentication. The private key of the registered certificate.
  display: Private Key
  hidden: true
  name: private_key
  type: 14
  required: false
  section: Connect
- display: ""
  displaypassword: Authorization code (run msgraph-generate-login-url command)
  hiddenusername: true
  name: creds_auth_code
  type: 9
  required: false
  section: Connect
- display: Application redirect URI
  name: redirect_uri
  required: true
  type: 0
  section: Connect
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
  section: Connect
- display: Use system proxy settings
  name: proxy
  type: 8
  required: false
  section: Connect
description: 'Use the Microsoft Search API in Microsoft Graph to search content stored in OneDrive or SharePoint: files, folders, lists, list items, or sites.'
display: Microsoft Graph Search
name: Microsoft Graph Search
script:
  commands:
  - arguments: []
    description: Tests connectivity.
    name: msgraph-search-test
  - arguments:
    - description: Represents a (text string) search query that contains search terms and optional filters.
      name: query_string
      required: true
      type: unknown
    - auto: PREDEFINED
      description: 'One or more types of resources expected in the response. '
      name: entity_type
      predefined:
      - list
      - site
      - listItem
      - message
      - event
      - drive
      - driveItem
      - externalItem
      required: true
    description: 'Use the Microsoft Search API in Microsoft Graph to search content stored in OneDrive or SharePoint: files, folders, lists, list items, or sites.'
    name: msgraph-search-content
    outputs:
    - contextPath: SearchContent
      description: OneDrive or SharePoint content returned from the search.
  - name: msgraph-search-generate-login-url
    arguments: []
    description: Generate the login url used for Authorization code flow.
  dockerimage: demisto/crypto:1.0.0.5490413
  script: ''
  subtype: python3
  type: python
fromversion: 6.0.0
tests:
- No tests (auto formatted)