How to add the data into properties.additionalData inside Threat Intelligence Indicator ?

Rushit Ajudiya 146 Reputation points
2023-01-19T07:05:40.47+00:00

I have created a Threat Intelligence Indicator in Microsoft Sentinel using this REST API ["https://learn.microsoft.com/en-us/rest/api/securityinsights/preview/threat-intelligence-indicator/create-indicator?tabs=HTTP"] and indicator was created successfully into Microsoft Sentinel Threat Intelligence .

But somehow I am not able to add the data in "properties.additionalData" which is present in "https://learn.microsoft.com/en-us/rest/api/securityinsights/preview/threat-intelligence-indicator/create-indicator?tabs=HTTP#threatintelligenceindicatormodel".

Can someone let me know how to add the data into "properties.additionalData" or how to update it ?

Microsoft Sentinel
Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
1,215 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
23,153 questions
{count} votes

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.