Share via

How to add the data into properties.additionalData inside Threat Intelligence Indicator ?

Rushit Ajudiya 161 Reputation points
2023-01-19T07:05:40.47+00:00

I have created a Threat Intelligence Indicator in Microsoft Sentinel using this REST API ["https://learn.microsoft.com/en-us/rest/api/securityinsights/preview/threat-intelligence-indicator/create-indicator?tabs=HTTP"] and indicator was created successfully into Microsoft Sentinel Threat Intelligence .

But somehow I am not able to add the data in "properties.additionalData" which is present in "https://learn.microsoft.com/en-us/rest/api/securityinsights/preview/threat-intelligence-indicator/create-indicator?tabs=HTTP#threatintelligenceindicatormodel".

Can someone let me know how to add the data into "properties.additionalData" or how to update it ?

Microsoft Security | Microsoft Entra | Microsoft Entra ID
Microsoft Security | Microsoft Sentinel

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.