你当前正在访问 Microsoft Azure Global Edition 技术文档网站。 如果需要访问由世纪互联运营的 Microsoft Azure 中国技术文档网站,请访问 https://docs.azure.cn

OperationalInsightsWorkspaceSecurityInsightsResource.QueryThreatIntelligenceIndicatorsAsync 方法

定义

根据筛选条件查询威胁智能指示器。

  • Request Path/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/threatIntelligence/main/queryIndicators
  • 操作IdThreatIntelligenceIndicator_QueryIndicators
public virtual Azure.AsyncPageable<Azure.ResourceManager.SecurityInsights.SecurityInsightsThreatIntelligenceIndicatorResource> QueryThreatIntelligenceIndicatorsAsync (Azure.ResourceManager.SecurityInsights.Models.ThreatIntelligenceFilteringCriteria threatIntelligenceFilteringCriteria, System.Threading.CancellationToken cancellationToken = default);
abstract member QueryThreatIntelligenceIndicatorsAsync : Azure.ResourceManager.SecurityInsights.Models.ThreatIntelligenceFilteringCriteria * System.Threading.CancellationToken -> Azure.AsyncPageable<Azure.ResourceManager.SecurityInsights.SecurityInsightsThreatIntelligenceIndicatorResource>
override this.QueryThreatIntelligenceIndicatorsAsync : Azure.ResourceManager.SecurityInsights.Models.ThreatIntelligenceFilteringCriteria * System.Threading.CancellationToken -> Azure.AsyncPageable<Azure.ResourceManager.SecurityInsights.SecurityInsightsThreatIntelligenceIndicatorResource>
Public Overridable Function QueryThreatIntelligenceIndicatorsAsync (threatIntelligenceFilteringCriteria As ThreatIntelligenceFilteringCriteria, Optional cancellationToken As CancellationToken = Nothing) As AsyncPageable(Of SecurityInsightsThreatIntelligenceIndicatorResource)

参数

threatIntelligenceFilteringCriteria
ThreatIntelligenceFilteringCriteria

用于查询威胁情报指标的筛选条件。

cancellationToken
CancellationToken

要使用的取消标记。

返回

的异步集合 SecurityInsightsThreatIntelligenceIndicatorResource ,可能需要多个服务请求进行迭代。

例外

threatIntelligenceFilteringCriteria 为 null。

适用于