Partager via


ThreatIntelligenceIndicator Class

Definition

Represents an indicator in Azure Security Insights.

public class ThreatIntelligenceIndicator : Azure.ResourceManager.SecurityInsights.Models.ThreatIntelligenceObject, System.ClientModel.Primitives.IJsonModel<Azure.ResourceManager.SecurityInsights.Models.ThreatIntelligenceIndicator>, System.ClientModel.Primitives.IPersistableModel<Azure.ResourceManager.SecurityInsights.Models.ThreatIntelligenceIndicator>
type ThreatIntelligenceIndicator = class
    inherit ThreatIntelligenceObject
    interface IJsonModel<ThreatIntelligenceIndicator>
    interface IPersistableModel<ThreatIntelligenceIndicator>
Public Class ThreatIntelligenceIndicator
Inherits ThreatIntelligenceObject
Implements IJsonModel(Of ThreatIntelligenceIndicator), IPersistableModel(Of ThreatIntelligenceIndicator)
Inheritance
ThreatIntelligenceIndicator
Implements

Constructors

ThreatIntelligenceIndicator()

Initializes a new instance of ThreatIntelligenceIndicator.

Properties

CreatedBy

The UserInfo of the user/entity which originally created this TI object.

(Inherited from ThreatIntelligenceObject)
Data

The core STIX object that this TI object represents.

To assign an object to the value of this property use FromObjectAsJson<T>(T, JsonSerializerOptions).

To assign an already formatted json string to this property use FromString(String).

Examples:

  • BinaryData.FromObjectAsJson("foo"): Creates a payload of "foo".
  • BinaryData.FromString("\"foo\""): Creates a payload of "foo".
  • BinaryData.FromObjectAsJson(new { key = "value" }): Creates a payload of { "key": "value" }.
  • BinaryData.FromString("{\"key\": \"value\"}"): Creates a payload of { "key": "value" }.

(Inherited from ThreatIntelligenceObject)
FirstIngestedOn

The timestamp for the first time this object was ingested.

(Inherited from ThreatIntelligenceObject)
Id

Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}.

(Inherited from ResourceData)
IngestionRulesVersion

The ID of the rules version that was active when this TI object was last ingested.

(Inherited from ThreatIntelligenceObject)
LastIngestedOn

The timestamp for the last time this object was ingested.

(Inherited from ThreatIntelligenceObject)
LastModifiedBy

The UserInfo of the user/entity which last modified this TI object.

(Inherited from ThreatIntelligenceObject)
LastUpdatedOn

The timestamp for the last time this TI object was updated.

(Inherited from ThreatIntelligenceObject)
LastUpdateMethod

The name of the method/application that initiated the last write to this TI object.

(Inherited from ThreatIntelligenceObject)
Name

The name of the resource.

(Inherited from ResourceData)
Observables

The observables of this indicator.

RelationshipHints

A dictionary used to help follow relationships from this object to other STIX objects. The keys are field names from the STIX object (in the 'data' field), and the values are lists of sources that can be prepended to the object ID in order to efficiently locate the target TI object.

(Inherited from ThreatIntelligenceObject)
ResourceType

The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts".

(Inherited from ResourceData)
Source

The source name for this TI object.

(Inherited from ThreatIntelligenceObject)
SystemData

Azure Resource Manager metadata containing createdBy and modifiedBy information.

(Inherited from ResourceData)

Methods

JsonModelWriteCore(Utf8JsonWriter, ModelReaderWriterOptions) (Inherited from ResourceData)

Explicit Interface Implementations

IJsonModel<ThreatIntelligenceIndicator>.Create(Utf8JsonReader, ModelReaderWriterOptions)

Reads one JSON value (including objects or arrays) from the provided reader and converts it to a model.

IJsonModel<ThreatIntelligenceIndicator>.Write(Utf8JsonWriter, ModelReaderWriterOptions)

Writes the model to the provided Utf8JsonWriter.

IJsonModel<ThreatIntelligenceObject>.Create(Utf8JsonReader, ModelReaderWriterOptions)

Reads one JSON value (including objects or arrays) from the provided reader and converts it to a model.

(Inherited from ThreatIntelligenceObject)
IJsonModel<ThreatIntelligenceObject>.Write(Utf8JsonWriter, ModelReaderWriterOptions)

Writes the model to the provided Utf8JsonWriter.

(Inherited from ThreatIntelligenceObject)
IPersistableModel<ThreatIntelligenceIndicator>.Create(BinaryData, ModelReaderWriterOptions)

Converts the provided BinaryData into a model.

IPersistableModel<ThreatIntelligenceIndicator>.GetFormatFromOptions(ModelReaderWriterOptions)

Gets the data interchange format (JSON, Xml, etc) that the model uses when communicating with the service.

IPersistableModel<ThreatIntelligenceIndicator>.Write(ModelReaderWriterOptions)

Writes the model into a BinaryData.

IPersistableModel<ThreatIntelligenceObject>.Create(BinaryData, ModelReaderWriterOptions)

Converts the provided BinaryData into a model.

(Inherited from ThreatIntelligenceObject)
IPersistableModel<ThreatIntelligenceObject>.GetFormatFromOptions(ModelReaderWriterOptions)

Gets the data interchange format (JSON, Xml, etc) that the model uses when communicating with the service.

(Inherited from ThreatIntelligenceObject)
IPersistableModel<ThreatIntelligenceObject>.Write(ModelReaderWriterOptions)

Writes the model into a BinaryData.

(Inherited from ThreatIntelligenceObject)

Applies to