Obter intelligenceProfile

Namespace: microsoft.graph.security

Leia as propriedades e as relações de um objeto intelligenceProfile .

Essa API está disponível nas seguintes implantações nacionais de nuvem.

Permissões

Escolha a permissão ou as permissões marcadas como menos privilegiadas para essa API. Use uma permissão ou permissões privilegiadas mais altas somente se o aplicativo exigir. Para obter detalhes sobre permissões delegadas e de aplicativo, consulte Tipos de permissão. Para saber mais sobre essas permissões, consulte a referência de permissões.

Solicitação HTTP

GET /security/threatIntelligence/intelProfiles/{intelligenceProfileId}

Parâmetros de consulta opcionais

Este método dá suporte a alguns parâmetros de consulta OData para ajudar a personalizar a resposta. Para obter informações gerais, acesse Parâmetros de consulta OData.

Cabeçalhos de solicitação

Corpo da solicitação

Não forneça um corpo de solicitação para esse método.

Resposta

Se for bem-sucedido, esse método retornará um 200 OK código de resposta e um objeto microsoft.graph.security.intelligenceProfile no corpo da resposta.

Exemplos

Solicitação

O exemplo a seguir mostra uma solicitação.

GET https://graph.microsoft.com/beta/security/threatIntelligence/intelProfiles/actinium

// Code snippets are only available for the latest version. Current version is 5.x

// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
var result = await graphClient.Security.ThreatIntelligence.IntelProfiles["{intelligenceProfile-id}"].GetAsync();

mgc-beta security threat-intelligence intel-profiles get --intelligence-profile-id {intelligenceProfile-id}

// Code snippets are only available for the latest major version. Current major version is $v0.*

// Dependencies
import (
	  "context"
	  msgraphsdk "github.com/microsoftgraph/msgraph-beta-sdk-go"
	  //other-imports
)


// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=go
intelProfiles, err := graphClient.Security().ThreatIntelligence().IntelProfiles().ByIntelligenceProfileId("intelligenceProfile-id").Get(context.Background(), nil)

// Code snippets are only available for the latest version. Current version is 6.x

GraphServiceClient graphClient = new GraphServiceClient(requestAdapter);

com.microsoft.graph.models.security.IntelligenceProfile result = graphClient.security().threatIntelligence().intelProfiles().byIntelligenceProfileId("{intelligenceProfile-id}").get();

const options = {
	authProvider,
};

const client = Client.init(options);

let intelligenceProfile = await client.api('/security/threatIntelligence/intelProfiles/actinium')
	.version('beta')
	.get();

<?php
use Microsoft\Graph\Beta\GraphServiceClient;


$graphServiceClient = new GraphServiceClient($tokenRequestContext, $scopes);


$result = $graphServiceClient->security()->threatIntelligence()->intelProfiles()->byIntelligenceProfileId('intelligenceProfile-id')->get()->wait();

Import-Module Microsoft.Graph.Beta.Security

Get-MgBetaSecurityThreatIntelligenceIntelProfile -IntelligenceProfileId $intelligenceProfileId

# Code snippets are only available for the latest version. Current version is 1.x
from msgraph_beta import GraphServiceClient
# To initialize your graph_client, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=python

result = await graph_client.security.threat_intelligence.intel_profiles.by_intelligence_profile_id('intelligenceProfile-id').get()

Resposta

O exemplo a seguir mostra a resposta.

Observação: o objeto de resposta mostrado aqui pode ser encurtado para legibilidade.

HTTP/1.1 200 OK
Content-Type: application/json

{
  "@odata.type": "#microsoft.graph.security.intelligenceProfile",
  "id": "actinium",
  "kind": "actor",
  "title": "ACTINIUM",
  "firstActiveDateTime": "2022-01-31T16:00:00.000Z",
  "aliases": [
    "Primitive Bear",
    "TEMP.Armageddon",
    "Shuckworm",
    "Gamaredon"
  ],
  "targets": [
    "Government",
    "Humanitarian"
  ],
  "countriesOrRegionsOfOrigin": [
    {
      "@odata.type": "microsoft.graph.security.countriesOrRegionsOfOrigin",
      "label": "Country/Region",
      "code": "Country/Region code"
    }
  ],
  "summary": {
    "@odata.type": "microsoft.graph.security.formattedContent",
    "content": "ACTINIUM is an activity group with a long history of targeting government and private sector organizations that have a presence in or an association with Ukraine",
    "format": "text"
  },
  "description": {
    "@odata.type": "microsoft.graph.security.formattedContent",
    "content": "### Summary\n\nACTINIUM is an activity group with a long history of targeting government and private sector organizations that have a presence in or an association with Ukraine. On February 4, 2022, Microsoft released a [blog]...",
    "format": "markdown"
  },
  "tradecraft": {
    "@odata.type": "microsoft.graph.security.formattedContent",
    "content": "#### Tactics, Techniques, and Procedures\n\n[ACTINIUM](https://attack.mitre.org/groups/G0047/) has exhibited use of the following attack techniques...",
    "format": "markdown"
  }
}