ThreatIntelligenceIndicatorOperations Class

Warning

DO NOT instantiate this class directly.

Instead, you should access the following operations through

SecurityInsights's

<xref:threat_intelligence_indicator> attribute.

Constructor

ThreatIntelligenceIndicatorOperations(*args, **kwargs)

Methods

append_tags	Append tags to a threat intelligence indicator.
create	Update a threat Intelligence indicator.
create_indicator	Create a new threat intelligence indicator.
delete	Delete a threat intelligence indicator.
get	View a threat intelligence indicator by name.
query_indicators	Query threat intelligence indicators as per filtering criteria.
replace_tags	Replace tags added to a threat intelligence indicator.

append_tags

Append tags to a threat intelligence indicator.

append_tags(resource_group_name: str, workspace_name: str, name: str, threat_intelligence_append_tags: ThreatIntelligenceAppendTags, **kwargs: Any) -> None

Parameters

Name	Description
resource_group_name Required	str The name of the resource group. The name is case insensitive.
workspace_name Required	str The name of the workspace.
name Required	str Threat intelligence indicator name field.
threat_intelligence_append_tags Required	ThreatIntelligenceAppendTags The threat intelligence append tags request body.

Keyword-Only Parameters

Name	Description
cls	callable A custom type or function that will be passed the direct response

Returns

Type	Description
None	None, or the result of cls(response)

Exceptions

Type	Description
HttpResponseError

create

Update a threat Intelligence indicator.

create(resource_group_name: str, workspace_name: str, name: str, threat_intelligence_properties: ThreatIntelligenceIndicatorModel, **kwargs: Any) -> ThreatIntelligenceInformation

Parameters

Name	Description
resource_group_name Required	str The name of the resource group. The name is case insensitive.
workspace_name Required	str The name of the workspace.
name Required	str Threat intelligence indicator name field.
threat_intelligence_properties Required	ThreatIntelligenceIndicatorModel Properties of threat intelligence indicators to create and update.

Keyword-Only Parameters

Name	Description
cls	callable A custom type or function that will be passed the direct response

Returns

Type	Description
ThreatIntelligenceInformation	ThreatIntelligenceInformation, or the result of cls(response)

Exceptions

Type	Description
HttpResponseError

create_indicator

Create a new threat intelligence indicator.

create_indicator(resource_group_name: str, workspace_name: str, threat_intelligence_properties: ThreatIntelligenceIndicatorModel, **kwargs: Any) -> ThreatIntelligenceInformation

Parameters

Name	Description
resource_group_name Required	str The name of the resource group. The name is case insensitive.
workspace_name Required	str The name of the workspace.
threat_intelligence_properties Required	ThreatIntelligenceIndicatorModel Properties of threat intelligence indicators to create and update.

Keyword-Only Parameters

Name	Description
cls	callable A custom type or function that will be passed the direct response

Returns

Type	Description
ThreatIntelligenceInformation	ThreatIntelligenceInformation, or the result of cls(response)

Exceptions

Type	Description
HttpResponseError

delete

Delete a threat intelligence indicator.

delete(resource_group_name: str, workspace_name: str, name: str, **kwargs: Any) -> None

Parameters

Name	Description
resource_group_name Required	str The name of the resource group. The name is case insensitive.
workspace_name Required	str The name of the workspace.
name Required	str Threat intelligence indicator name field.

Keyword-Only Parameters

Name	Description
cls	callable A custom type or function that will be passed the direct response

Returns

Type	Description
None	None, or the result of cls(response)

Exceptions

Type	Description
HttpResponseError

get

View a threat intelligence indicator by name.

get(resource_group_name: str, workspace_name: str, name: str, **kwargs: Any) -> ThreatIntelligenceInformation

Parameters

Name	Description
resource_group_name Required	str The name of the resource group. The name is case insensitive.
workspace_name Required	str The name of the workspace.
name Required	str Threat intelligence indicator name field.

Keyword-Only Parameters

Name	Description
cls	callable A custom type or function that will be passed the direct response

Returns

Type	Description
ThreatIntelligenceInformation	ThreatIntelligenceInformation, or the result of cls(response)

Exceptions

Type	Description
HttpResponseError

query_indicators

Query threat intelligence indicators as per filtering criteria.

query_indicators(resource_group_name: str, workspace_name: str, threat_intelligence_filtering_criteria: ThreatIntelligenceFilteringCriteria, **kwargs: Any) -> Iterable[ThreatIntelligenceInformationList]

Parameters

Name	Description
resource_group_name Required	str The name of the resource group. The name is case insensitive.
workspace_name Required	str The name of the workspace.
threat_intelligence_filtering_criteria Required	ThreatIntelligenceFilteringCriteria Filtering criteria for querying threat intelligence indicators.

Keyword-Only Parameters

Name	Description
cls	callable A custom type or function that will be passed the direct response

Returns

Type	Description
ItemPaged[ThreatIntelligenceInformationList]	An iterator like instance of either ThreatIntelligenceInformationList or the result of cls(response)

Exceptions

Type	Description
HttpResponseError

replace_tags

Replace tags added to a threat intelligence indicator.

replace_tags(resource_group_name: str, workspace_name: str, name: str, threat_intelligence_replace_tags: ThreatIntelligenceIndicatorModel, **kwargs: Any) -> ThreatIntelligenceInformation

Parameters

Name	Description
resource_group_name Required	str The name of the resource group. The name is case insensitive.
workspace_name Required	str The name of the workspace.
name Required	str Threat intelligence indicator name field.
threat_intelligence_replace_tags Required	ThreatIntelligenceIndicatorModel Tags in the threat intelligence indicator to be replaced.

Keyword-Only Parameters

Name	Description
cls	callable A custom type or function that will be passed the direct response

Returns

Type	Description
ThreatIntelligenceInformation	ThreatIntelligenceInformation, or the result of cls(response)

Exceptions

Type	Description
HttpResponseError

Attributes

models

models = <module 'azure.mgmt.securityinsight.models' from 'C:\\ToolCache\\Python\\3.12.10\\x64\\Lib\\site-packages\\py2docfx\\venv\\venv214\\Lib\\site-packages\\azure\\mgmt\\securityinsight\\models\\__init__.py'>