MockableSecurityInsightsArmClient.QueryThreatIntelligenceIndicatorsAsync Method

Definition

Query threat intelligence indicators as per filtering criteria.

  • Request Path. : /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/threatIntelligence/main/queryIndicators.
  • Operation Id. : ThreatIntelligenceIndicatorOperationGroup_QueryIndicators.
  • Default Api Version. : 2025-07-01-preview.
public virtual Azure.AsyncPageable<Azure.ResourceManager.SecurityInsights.SecurityInsightsThreatIntelligenceIndicatorResource> QueryThreatIntelligenceIndicatorsAsync(Azure.Core.ResourceIdentifier scope, Azure.ResourceManager.SecurityInsights.Models.ThreatIntelligenceFilteringCriteria threatIntelligenceFilteringCriteria, System.Threading.CancellationToken cancellationToken = default);
abstract member QueryThreatIntelligenceIndicatorsAsync : Azure.Core.ResourceIdentifier * Azure.ResourceManager.SecurityInsights.Models.ThreatIntelligenceFilteringCriteria * System.Threading.CancellationToken -> Azure.AsyncPageable<Azure.ResourceManager.SecurityInsights.SecurityInsightsThreatIntelligenceIndicatorResource>
override this.QueryThreatIntelligenceIndicatorsAsync : Azure.Core.ResourceIdentifier * Azure.ResourceManager.SecurityInsights.Models.ThreatIntelligenceFilteringCriteria * System.Threading.CancellationToken -> Azure.AsyncPageable<Azure.ResourceManager.SecurityInsights.SecurityInsightsThreatIntelligenceIndicatorResource>
Public Overridable Function QueryThreatIntelligenceIndicatorsAsync (scope As ResourceIdentifier, threatIntelligenceFilteringCriteria As ThreatIntelligenceFilteringCriteria, Optional cancellationToken As CancellationToken = Nothing) As AsyncPageable(Of SecurityInsightsThreatIntelligenceIndicatorResource)

Parameters

scope
ResourceIdentifier

The scope that the resource will apply against.

threatIntelligenceFilteringCriteria
ThreatIntelligenceFilteringCriteria

The content of the action request.

cancellationToken
CancellationToken

The cancellation token to use.

Returns

A collection of SecurityInsightsThreatIntelligenceIndicatorResource that may take multiple service requests to iterate over.

Exceptions

scope or threatIntelligenceFilteringCriteria is null.

Applies to