TIObject interface

Represents a threat intelligence object in Azure Security Insights.

Extends

Properties

createdBy

The UserInfo of the user/entity which originally created this TI object.

data

The core STIX object that this TI object represents.

firstIngestedTimeUtc

The timestamp for the first time this object was ingested.

ingestionRulesVersion

The ID of the rules version that was active when this TI object was last ingested.

kind

The discriminator possible values: ThreatActor, AttackPattern, Identity, Relationship, Indicator

lastIngestedTimeUtc

The timestamp for the last time this object was ingested.

lastModifiedBy

The UserInfo of the user/entity which last modified this TI object.

lastUpdatedDateTimeUtc

The timestamp for the last time this TI object was updated.

lastUpdateMethod

The name of the method/application that initiated the last write to this TI object.

relationshipHints

A dictionary used to help follow relationships from this object to other STIX objects. The keys are field names from the STIX object (in the 'data' field), and the values are lists of sources that can be prepended to the object ID in order to efficiently locate the target TI object.

source

The source name for this TI object.

Inherited Properties

id

Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}

name

The name of the resource

systemData

Azure Resource Manager metadata containing createdBy and modifiedBy information.

type

The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"

Property Details

createdBy

The UserInfo of the user/entity which originally created this TI object.

createdBy?: UserInfo

Property Value

data

The core STIX object that this TI object represents.

data?: Record<string, any>

Property Value

Record<string, any>

firstIngestedTimeUtc

The timestamp for the first time this object was ingested.

firstIngestedTimeUtc?: Date

Property Value

Date

ingestionRulesVersion

The ID of the rules version that was active when this TI object was last ingested.

ingestionRulesVersion?: string

Property Value

string

kind

The discriminator possible values: ThreatActor, AttackPattern, Identity, Relationship, Indicator

kind: string

Property Value

string

lastIngestedTimeUtc

The timestamp for the last time this object was ingested.

lastIngestedTimeUtc?: Date

Property Value

Date

lastModifiedBy

The UserInfo of the user/entity which last modified this TI object.

lastModifiedBy?: UserInfo

Property Value

lastUpdatedDateTimeUtc

The timestamp for the last time this TI object was updated.

lastUpdatedDateTimeUtc?: Date

Property Value

Date

lastUpdateMethod

The name of the method/application that initiated the last write to this TI object.

lastUpdateMethod?: string

Property Value

string

relationshipHints

A dictionary used to help follow relationships from this object to other STIX objects. The keys are field names from the STIX object (in the 'data' field), and the values are lists of sources that can be prepended to the object ID in order to efficiently locate the target TI object.

relationshipHints?: RelationshipHint[]

Property Value

source

The source name for this TI object.

source?: string

Property Value

string

Inherited Property Details

id

Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}

id?: string

Property Value

string

Inherited From Resource.id

name

The name of the resource

name?: string

Property Value

string

Inherited From Resource.name

systemData

Azure Resource Manager metadata containing createdBy and modifiedBy information.

systemData?: SystemData

Property Value

Inherited From Resource.systemData

type

The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"

type?: string

Property Value

string

Inherited From Resource.type