Sample queries for enabling Powershell or API Integration with Office 365 Advanced Threat Protection - View it on GitHub