subdomain resource type

Namespace: microsoft.graph.security

Important

APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

Represents an internet domain that is part of a primary domain. For example, learn.microsoft.com is a subdomain of microsoft.com.

For every subdomain, there can be a new set of IP addresses to which the domain resolves. This can be a great data source for finding related infrastructure.

Methods

Method	Return type	Description
Get subdomain	microsoft.graph.security.subdomain	Read the properties and relationships of a microsoft.graph.security.subdomain object.
List subdomains for a host	microsoft.graph.security.subdomain collection	Get a list of subdomain resources of a host.

Properties

Property	Type	Description
firstSeenDateTime	DateTimeOffset	The first date and time when Microsoft Defender Threat Intelligence observed the subdomain. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014, is 2014-01-01T00:00:00Z.
id	String	A system-generated ID for the subdomain.

Relationships

Relationship	Type	Description
host	microsoft.graph.security.host	The host of the subdomain.

JSON representation

The following is a JSON representation of the resource.

{
  "@odata.type": "#microsoft.graph.security.subdomain",
  "id": "String (identifier)",
  "firstSeenDateTime": "String (timestamp)"
}