How to Import Attack Simulation Training Data from Microsoft Defender into Power BI?

Christinem12345, To integrate Attack Simulation Training data from Microsoft Defender for Office 365 into Power BI, you can utilize the Microsoft Graph API to programmatically access detailed simulation reports. This approach allows you to retrieve comprehensive data on compromised users, users who reported phishing attempts, training completions, and more.

Access Simulation Reports:

Endpoint: https://graph.microsoft.com/v1.0/security/attackSimulation/simulations/{simulationId}/report/simulationUsers. Replace {simulationId} with the ID of the specific simulation you're interested in.

1. Connect Power BI to Microsoft Graph API:
• In Power BI Desktop, use the Web connector to fetch data from the Microsoft Graph API endpoints. Input the API URL and include the access token in the HTTP request header for authentication. Transform and model the data as needed to create insightful visualizations.

Additional Resources:

Microsoft Graph API Documentation: Provides detailed information on accessing attack simulation data:

• List Simulations
• Simulation User Report

Power BI Integration: Guidance on connecting Power BI to Microsoft Defender for Endpoint APIs, which is applicable to other Microsoft Graph API integrations: Create custom reports using Power BI

Thanks,

Prashanth Are

MS Fabric community support

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly and give Kudos if helped you resolve your query