Share via


ThreatIntelligenceIndicatorModel Class

Definition

Threat intelligence indicator entity.

[System.ComponentModel.TypeConverter(typeof(Microsoft.Azure.PowerShell.Cmdlets.SecurityInsights.Models.Api20210901Preview.ThreatIntelligenceIndicatorModelTypeConverter))]
public class ThreatIntelligenceIndicatorModel : Microsoft.Azure.PowerShell.Cmdlets.SecurityInsights.Models.Api20210901Preview.IThreatIntelligenceIndicatorModel, Microsoft.Azure.PowerShell.Cmdlets.SecurityInsights.Runtime.IValidates
[<System.ComponentModel.TypeConverter(typeof(Microsoft.Azure.PowerShell.Cmdlets.SecurityInsights.Models.Api20210901Preview.ThreatIntelligenceIndicatorModelTypeConverter))>]
type ThreatIntelligenceIndicatorModel = class
    interface IThreatIntelligenceIndicatorModel
    interface IJsonSerializable
    interface IThreatIntelligenceInformation
    interface IResourceWithEtag
    interface IResource
    interface IThreatIntelligenceResourceKind
    interface IValidates
Public Class ThreatIntelligenceIndicatorModel
Implements IThreatIntelligenceIndicatorModel, IValidates
Inheritance
ThreatIntelligenceIndicatorModel
Attributes
Implements

Constructors

ThreatIntelligenceIndicatorModel()

Creates an new ThreatIntelligenceIndicatorModel instance.

Properties

AdditionalData

A bag of custom fields that should be part of the entity and will be presented to the user.

Confidence

Confidence of threat intelligence entity

Created

Created by

CreatedByRef

Created by reference of threat intelligence entity

Defanged

Is threat intelligence entity defanged

Description

Description of a threat intelligence entity

DisplayName

Display name of a threat intelligence entity

Etag

Etag of the azure resource

Extension

Extensions map

ExternalId

External ID of threat intelligence entity

ExternalLastUpdatedTimeUtc

External last updated time in UTC

ExternalReference

External References

FriendlyName

The graph item display name which is a short humanly readable description of the graph item instance. This property is optional and might be system generated.

GranularMarking

Granular Markings

Id

Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}

IndicatorType

Indicator types of threat intelligence entities

KillChainPhase

Kill chain phases

Kind

The kind of the entity.

Label

Labels of threat intelligence entity

Language

Language of threat intelligence entity

LastUpdatedTimeUtc

Last updated time in UTC

Modified

Modified by

Name

The name of the resource

ObjectMarkingRef

Threat intelligence entity object marking references

ParsedPattern

Parsed patterns

Pattern

Pattern of a threat intelligence entity

PatternType

Pattern type of a threat intelligence entity

PatternVersion

Pattern version of a threat intelligence entity

Revoked

Is threat intelligence entity revoked

Source

Source of a threat intelligence entity

SystemData

Azure Resource Manager metadata containing createdBy and modifiedBy information.

SystemDataCreatedAt

The timestamp of resource creation (UTC).

SystemDataCreatedBy

The identity that created the resource.

SystemDataCreatedByType

The type of identity that created the resource.

SystemDataLastModifiedAt

The timestamp of resource last modification (UTC)

SystemDataLastModifiedBy

The identity that last modified the resource.

SystemDataLastModifiedByType

The type of identity that last modified the resource.

ThreatIntelligenceTag

List of tags

ThreatType

Threat types

Type

The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"

ValidFrom

Valid from

ValidUntil

Valid until

Methods

DeserializeFromDictionary(IDictionary)

Deserializes a IDictionary into an instance of ThreatIntelligenceIndicatorModel.

DeserializeFromPSObject(PSObject)

Deserializes a PSObject into an instance of ThreatIntelligenceIndicatorModel.

FromJson(JsonNode)

Deserializes a JsonNode into an instance of Microsoft.Azure.PowerShell.Cmdlets.SecurityInsights.Models.Api20210901Preview.IThreatIntelligenceIndicatorModel.

FromJsonString(String)

Creates a new instance of ThreatIntelligenceIndicatorModel, deserializing the content from a json string.

ToJson(JsonObject, SerializationMode)

Serializes this instance of ThreatIntelligenceIndicatorModel into a JsonNode.

ToJsonString()

Serializes this instance to a json string.

Validate(IEventListener)

Validates that this object meets the validation criteria.

Applies to