Edit

Share via

hostCookie resource type

  • Article

Namespace: microsoft.graph.security

Note

The Microsoft Graph API for Microsoft Defender Threat Intelligence requires an active Defender Threat Intelligence Portal license and API add-on license for the tenant.

Represents a cookie, which is a small piece of data sent from a server to a client as the user browses the internet. These values sometimes contain a state for the application or little bits of tracking data. When Microsoft Defender Threat Intelligence crawls a website, it indexes cookie names so users can search them. Cookies are also used by malicious actors to keep track of infected victims or to store data to be used later.

The hostCookie is associated with a host resource.

Inherits from artifact.

Methods

Method Return type Description
Get microsoft.graph.security.hostCookie Read the properties and relationships of a microsoft.graph.security.hostCookie object.

Properties

Property Type Description
domain String The URI for which the cookie is valid.
firstSeenDateTime DateTimeOffset The first date and time when this hostCookie was observed by Microsoft Defender Threat Intelligence. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014, is 2014-01-01T00:00:00Z.
id String A system-generated ID for this hostCookie. Inherited from microsoft.graph.security.artifact.
lastSeenDateTime DateTimeOffset The most recent date and time when this hostCookie was observed by Microsoft Defender Threat Intelligence. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014, is 2014-01-01T00:00:00Z.
name String The name of the cookie, for example, JSESSIONID or SEARCH_NAMESITE.

Relationships

Relationship Type Description
host microsoft.graph.security.host Indicates that a cookie of this name and domain was found related to this host.

JSON representation

The following JSON representation shows the resource type.

{
  "@odata.type": "#microsoft.graph.security.hostCookie",
  "domain": "String",
  "firstSeenDateTime": "String (timestamp)",
  "id": "String (identifier)",
  "lastSeenDateTime": "String (timestamp)",
  "name": "String"
}