https://d365hub.com/posts/details/f71713eb-2257-403d-872d-8f95f59e89c7/build-custom-incident-response-actions-with-microsoft-365-defender-apis