articleIndicator resource type

Namespace: microsoft.graph.security

Note

The Microsoft Graph API for Microsoft Defender Threat Intelligence requires an active Defender Threat Intelligence Portal license and API add-on license for the tenant.

Represents a resource that communicates indicators of threat or compromise related to the contents of an article.

The relationship from an articleIndicator to an artifact provides the means for threat intelligence API users to further evaluate details about reported indicator.

Inherits from indicator.

Methods

Method	Return type	Description
Get article indicator	microsoft.graph.security.articleIndicator	Read the properties and relationships of a articleIndicator object.

Properties

Property	Type	Description
id	String	The system-generated ID for the articleIndicator. Inherited from microsoft.graph.security.indicator.
source	microsoft.graph.security.indicatorSource	Communicates where this articleIndicator originated. The possible values are: microsoft, osint, public, unknownFutureValue. Inherited from microsoft.graph.security.indicator.

Relationships

Relationship	Type	Description
artifact	microsoft.graph.security.artifact	The artifact that is reported in this articleIndicator. Inherited from microsoft.graph.security.indicator.

JSON representation

The following JSON representation shows the resource type.

{
  "@odata.type": "#microsoft.graph.security.articleIndicator",
  "id": "String (identifier)",
  "source": "String"
}