Graph security migration scoping
Microsoft Graph Security Alerts v1 Retirement Mapper
Source check: 2026-07-10
Microsoft migration note
Legacy /security/alerts stops returning data after August 31, 2026. Verify official docs before rollout.
Mapper output
Alert ingestion migration plan
| Detected caller | Endpoint family | Source clue | Owner clue | Priority |
|---|---|---|---|---|
| Run a scan to populate integration inventory. | ||||
| Migration surface | Evidence | Target route | Risk | Next action |
|---|---|---|---|---|
| Run a scan to populate the endpoint migration matrix. | ||||
Field mapping and source coverage
- Run a scan to identify field-mapping and source-coverage gaps.
Sentinel and Defender caveats
- Run a scan to identify Sentinel and Microsoft 365 Defender caveats.
Missing evidence checklist
- Paste evidence to see required owner, test tenant, sample replay, schema-owner, cutoff, and rollback gaps.
Run a scan to generate copyable artifacts.