Threatintelligence Indicators
Link to resource definition: Microsoft.SecurityInsights/threatintelligence/indicators
| Default Path | Alias |
|---|---|
properties.additionalData |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.additionalData |
properties.confidence |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.confidence |
properties.created |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.created |
properties.createdByRef |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.createdByRef |
properties.defanged |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.defanged |
properties.description |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.description |
properties.displayName |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.displayName |
properties.extensions |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.extensions |
properties.externalId |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.externalId |
properties.externalLastUpdatedTimeUtc |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.externalLastUpdatedTimeUtc |
properties.externalReferences |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.externalReferences |
properties.externalReferences[*] |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.externalReferences[*] |
properties.externalReferences[*].description |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.externalReferences[*].description |
properties.externalReferences[*].externalId |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.externalReferences[*].externalId |
properties.externalReferences[*].hashes |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.externalReferences[*].hashes |
properties.externalReferences[*].sourceName |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.externalReferences[*].sourceName |
properties.externalReferences[*].url |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.externalReferences[*].url |
properties.friendlyName |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.friendlyName |
properties.granularMarkings |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.granularMarkings |
properties.granularMarkings[*] |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.granularMarkings[*] |
properties.granularMarkings[*].language |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.granularMarkings[*].language |
properties.granularMarkings[*].markingRef |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.granularMarkings[*].markingRef |
properties.granularMarkings[*].selectors |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.granularMarkings[*].selectors |
properties.granularMarkings[*].selectors[*] |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.granularMarkings[*].selectors[*] |
properties.indicatorTypes |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.indicatorTypes |
properties.indicatorTypes[*] |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.indicatorTypes[*] |
properties.killChainPhases |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.killChainPhases |
properties.killChainPhases[*] |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.killChainPhases[*] |
properties.killChainPhases[*].killChainName |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.killChainPhases[*].killChainName |
properties.killChainPhases[*].phaseName |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.killChainPhases[*].phaseName |
properties.labels |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.labels |
properties.labels[*] |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.labels[*] |
properties.language |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.language |
properties.lastUpdatedTimeUtc |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.lastUpdatedTimeUtc |
properties.modified |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.modified |
properties.objectMarkingRefs |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.objectMarkingRefs |
properties.objectMarkingRefs[*] |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.objectMarkingRefs[*] |
properties.parsedPattern |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.parsedPattern |
properties.parsedPattern[*] |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.parsedPattern[*] |
properties.parsedPattern[*].patternTypeKey |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.parsedPattern[*].patternTypeKey |
properties.parsedPattern[*].patternTypeValues |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.parsedPattern[*].patternTypeValues |
properties.parsedPattern[*].patternTypeValues[*] |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.parsedPattern[*].patternTypeValues[*] |
properties.parsedPattern[*].patternTypeValues[*].value |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.parsedPattern[*].patternTypeValues[*].value |
properties.parsedPattern[*].patternTypeValues[*].valueType |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.parsedPattern[*].patternTypeValues[*].valueType |
properties.pattern |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.pattern |
properties.patternType |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.patternType |
properties.patternVersion |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.patternVersion |
properties.revoked |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.revoked |
properties.source |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.source |
properties.threatIntelligenceTags |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.threatIntelligenceTags |
properties.threatIntelligenceTags[*] |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.threatIntelligenceTags[*] |
properties.threatTypes |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.threatTypes |
properties.threatTypes[*] |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.threatTypes[*] |
properties.validFrom |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.validFrom |
properties.validUntil |
Microsoft.SecurityInsights/threatIntelligence/indicators/indicator.validUntil |