Edit

hostPort resource type

  • Article

Namespace: microsoft.graph.security

Note

The Microsoft Graph API for Microsoft Defender Threat Intelligence requires an active Defender Threat Intelligence Portal license and API add-on license for the tenant.

Represents the connection endpoints that direct data to and from the services that run on a host.

Inherits from entity.

Methods

Method Return type Description
List hostPorts microsoft.graph.security.hostPort collection Get a list of hostPort objects assoicated with a host.
Get hostPort microsoft.graph.security.hostPort Read the properties and relationships of a hostPort object.

Properties

Property Type Description
banners microsoft.graph.security.hostPortBanner collection The hostPortBanners retrieved from scanning the port.
firstSeenDateTime DateTimeOffset The first date and time when Microsoft Defender Threat Intelligence observed the hostPort. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014, is 2014-01-01T00:00:00Z.
id String A system-generated ID for the hostPort. Inherited from entity.
lastScanDateTime DateTimeOffset The last date and time when Microsoft Defender Threat Intelligence scanned the hostPort. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014, is 2014-01-01T00:00:00Z.
lastSeenDateTime DateTimeOffset The last date and time when Microsoft Defender Threat Intelligence observed the hostPort. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014, is 2014-01-01T00:00:00Z.
port Int32 The numerical identifier of the port which is standardized across the internet.
protocol microsoft.graph.security.hostPortProtocol The general protocol used to scan the port. The possible values are: tcp, udp, unknownFutureValue.
services microsoft.graph.security.hostPortComponent collection The hostPortComponents retrieved from scanning the port.
status microsoft.graph.security.hostPortStatus The status of the port. The possible values are: open, filtered, closed, unknownFutureValue.
timesObserved Int32 The total amount of times that Microsoft Defender Threat Intelligence has observed the hostPort in all its scans.

Relationships

Relationship Type Description
host microsoft.graph.security.host The host related to this hostPort. This is a reverse navigation property. When you navigate to hostPorts from a host, assume that this is a return reference.
mostRecentSslCertificate microsoft.graph.security.sslCertificate The most recent sslCertificate used to communicate on the port.

JSON representation

The following is a JSON representation of the resource.

{
  "@odata.type": "#microsoft.graph.security.hostPort",
  "banners": [{"@odata.type": "microsoft.graph.security.hostPortBanner"}],
  "firstSeenDateTime": "String (timestamp)",
  "id": "String (identifier)",
  "lastScanDateTime": "String (timestamp)",
  "lastSeenDateTime": "String (timestamp)",
  "port": "Int32",
  "protocol": "String",
  "services": [{"@odata.type": "microsoft.graph.security.hostPortComponent"}],
  "status": "String",
  "timesObserved": "Int32"
}