Forum Discussion
How to Import Attack Simulation Training Data from Microsoft Defender into Power BI?
Christinem12345, To integrate Attack Simulation Training data from Microsoft Defender for Office 365 into Power BI, you can utilize the Microsoft Graph API to programmatically access detailed simulation reports. This approach allows you to retrieve comprehensive data on compromised users, users who reported phishing attempts, training completions, and more.
Access Simulation Reports:
Endpoint: https://graph.microsoft.com/v1.0/security/attackSimulation/simulations/{simulationId}/report/simulationUsers. Replace {simulationId} with the ID of the specific simulation you're interested in.
- Connect Power BI to Microsoft Graph API:
- In Power BI Desktop, use the Web connector to fetch data from the Microsoft Graph API endpoints. Input the API URL and include the access token in the HTTP request header for authentication. Transform and model the data as needed to create insightful visualizations.
Additional Resources:
Microsoft Graph API Documentation: Provides detailed information on accessing attack simulation data:
Power BI Integration: Guidance on connecting Power BI to Microsoft Defender for Endpoint APIs, which is applicable to other Microsoft Graph API integrations: Create custom reports using Power BI
Thanks,
Prashanth Are
MS Fabric community support
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly and give Kudos if helped you resolve your query
I am specifically looking for information on the attack simulation training. I was already able to get queries from Microsoft Defender. Thank you!
Hi Christinem12345,
Can you please refer to below Microsoft official learn resources and let me know if this helps?
https://learn.microsoft.com/en-us/defender-office-365/attack-simulation-training-get-started
Thanks,
Prashanth Are
MS Fabric community support
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly and give Kudos if helped you resolve your query
Hello Prashanth! I am looking to integrate the data from the recent attack simulation into Powerbi. I would want the compromised users, users who reported, people who completed the training, people who clicked hte message, and other stuff along the lines of that.