ArmSecurityInsightsModelFactory.ThreatIntelligenceIndicator Method

Definition

public static Azure.ResourceManager.SecurityInsights.Models.ThreatIntelligenceIndicator ThreatIntelligenceIndicator(Azure.Core.ResourceIdentifier id = default, string name = default, Azure.Core.ResourceType resourceType = default, Azure.ResourceManager.Models.SystemData systemData = default, System.Collections.Generic.IReadOnlyDictionary<string,BinaryData> data = default, Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsUserInfo createdBy = default, string source = default, DateTimeOffset? firstIngestedOn = default, DateTimeOffset? lastIngestedOn = default, Guid? ingestionRulesVersion = default, string lastUpdateMethod = default, Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsUserInfo lastModifiedBy = default, DateTimeOffset? lastUpdatedOn = default, System.Collections.Generic.IEnumerable<Azure.ResourceManager.SecurityInsights.Models.RelationshipHint> relationshipHints = default, System.Collections.Generic.IEnumerable<Azure.ResourceManager.SecurityInsights.Models.IndicatorObservablesItem> observables = default);
static member ThreatIntelligenceIndicator : Azure.Core.ResourceIdentifier * string * Azure.Core.ResourceType * Azure.ResourceManager.Models.SystemData * System.Collections.Generic.IReadOnlyDictionary<string, BinaryData> * Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsUserInfo * string * Nullable<DateTimeOffset> * Nullable<DateTimeOffset> * Nullable<Guid> * string * Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsUserInfo * Nullable<DateTimeOffset> * seq<Azure.ResourceManager.SecurityInsights.Models.RelationshipHint> * seq<Azure.ResourceManager.SecurityInsights.Models.IndicatorObservablesItem> -> Azure.ResourceManager.SecurityInsights.Models.ThreatIntelligenceIndicator
Public Shared Function ThreatIntelligenceIndicator (Optional id As ResourceIdentifier = Nothing, Optional name As String = Nothing, Optional resourceType As ResourceType = Nothing, Optional systemData As SystemData = Nothing, Optional data As IReadOnlyDictionary(Of String, BinaryData) = Nothing, Optional createdBy As SecurityInsightsUserInfo = Nothing, Optional source As String = Nothing, Optional firstIngestedOn As Nullable(Of DateTimeOffset) = Nothing, Optional lastIngestedOn As Nullable(Of DateTimeOffset) = Nothing, Optional ingestionRulesVersion As Nullable(Of Guid) = Nothing, Optional lastUpdateMethod As String = Nothing, Optional lastModifiedBy As SecurityInsightsUserInfo = Nothing, Optional lastUpdatedOn As Nullable(Of DateTimeOffset) = Nothing, Optional relationshipHints As IEnumerable(Of RelationshipHint) = Nothing, Optional observables As IEnumerable(Of IndicatorObservablesItem) = Nothing) As ThreatIntelligenceIndicator

Parameters

id
ResourceIdentifier

Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}.

name
String

The name of the resource.

resourceType
ResourceType

The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts".

systemData
SystemData

Azure Resource Manager metadata containing createdBy and modifiedBy information.

data
IReadOnlyDictionary<String,BinaryData>

The core STIX object that this TI object represents.

createdBy
SecurityInsightsUserInfo

The UserInfo of the user/entity which originally created this TI object.

source
String

The source name for this TI object.

firstIngestedOn
Nullable<DateTimeOffset>

The timestamp for the first time this object was ingested.

lastIngestedOn
Nullable<DateTimeOffset>

The timestamp for the last time this object was ingested.

ingestionRulesVersion
Nullable<Guid>

The ID of the rules version that was active when this TI object was last ingested.

lastUpdateMethod
String

The name of the method/application that initiated the last write to this TI object.

lastModifiedBy
SecurityInsightsUserInfo

The UserInfo of the user/entity which last modified this TI object.

lastUpdatedOn
Nullable<DateTimeOffset>

The timestamp for the last time this TI object was updated.

relationshipHints
IEnumerable<RelationshipHint>

A dictionary used to help follow relationships from this object to other STIX objects. The keys are field names from the STIX object (in the 'data' field), and the values are lists of sources that can be prepended to the object ID in order to efficiently locate the target TI object.

observables
IEnumerable<IndicatorObservablesItem>

The observables of this indicator.

Returns

A new ThreatIntelligenceIndicator instance for mocking.

Applies to