Share via


ThreatIntelligenceObject Class

Definition

Represents a threat intelligence object in Azure Security Insights. Please note ThreatIntelligenceObject is the base class. According to the scenario, a derived class of the base class might need to be assigned here, or this property needs to be casted to one of the possible derived classes. The available derived classes include ThreatIntelligenceAttackPattern, ThreatIntelligenceIdentity, ThreatIntelligenceIndicator, ThreatIntelligenceRelationship and ThreatIntelligenceThreatActor.

[System.ClientModel.Primitives.PersistableModelProxy(typeof(Azure.ResourceManager.SecurityInsights.Models.UnknownTIObject))]
public abstract class ThreatIntelligenceObject : Azure.ResourceManager.Models.ResourceData, System.ClientModel.Primitives.IJsonModel<Azure.ResourceManager.SecurityInsights.Models.ThreatIntelligenceObject>, System.ClientModel.Primitives.IPersistableModel<Azure.ResourceManager.SecurityInsights.Models.ThreatIntelligenceObject>
[<System.ClientModel.Primitives.PersistableModelProxy(typeof(Azure.ResourceManager.SecurityInsights.Models.UnknownTIObject))>]
type ThreatIntelligenceObject = class
    inherit ResourceData
    interface IJsonModel<ThreatIntelligenceObject>
    interface IPersistableModel<ThreatIntelligenceObject>
Public MustInherit Class ThreatIntelligenceObject
Inherits ResourceData
Implements IJsonModel(Of ThreatIntelligenceObject), IPersistableModel(Of ThreatIntelligenceObject)
Inheritance
ThreatIntelligenceObject
Derived
Attributes
Implements

Constructors

ThreatIntelligenceObject()

Initializes a new instance of ThreatIntelligenceObject.

Properties

CreatedBy

The UserInfo of the user/entity which originally created this TI object.

Data

The core STIX object that this TI object represents.

To assign an object to the value of this property use FromObjectAsJson<T>(T, JsonSerializerOptions).

To assign an already formatted json string to this property use FromString(String).

Examples:

  • BinaryData.FromObjectAsJson("foo"): Creates a payload of "foo".
  • BinaryData.FromString("\"foo\""): Creates a payload of "foo".
  • BinaryData.FromObjectAsJson(new { key = "value" }): Creates a payload of { "key": "value" }.
  • BinaryData.FromString("{\"key\": \"value\"}"): Creates a payload of { "key": "value" }.

FirstIngestedOn

The timestamp for the first time this object was ingested.

Id

Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}.

(Inherited from ResourceData)
IngestionRulesVersion

The ID of the rules version that was active when this TI object was last ingested.

LastIngestedOn

The timestamp for the last time this object was ingested.

LastModifiedBy

The UserInfo of the user/entity which last modified this TI object.

LastUpdatedOn

The timestamp for the last time this TI object was updated.

LastUpdateMethod

The name of the method/application that initiated the last write to this TI object.

Name

The name of the resource.

(Inherited from ResourceData)
RelationshipHints

A dictionary used to help follow relationships from this object to other STIX objects. The keys are field names from the STIX object (in the 'data' field), and the values are lists of sources that can be prepended to the object ID in order to efficiently locate the target TI object.

ResourceType

The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts".

(Inherited from ResourceData)
Source

The source name for this TI object.

SystemData

Azure Resource Manager metadata containing createdBy and modifiedBy information.

(Inherited from ResourceData)

Methods

JsonModelWriteCore(Utf8JsonWriter, ModelReaderWriterOptions) (Inherited from ResourceData)

Explicit Interface Implementations

IJsonModel<ThreatIntelligenceObject>.Create(Utf8JsonReader, ModelReaderWriterOptions)

Reads one JSON value (including objects or arrays) from the provided reader and converts it to a model.

IJsonModel<ThreatIntelligenceObject>.Write(Utf8JsonWriter, ModelReaderWriterOptions)

Writes the model to the provided Utf8JsonWriter.

IPersistableModel<ThreatIntelligenceObject>.Create(BinaryData, ModelReaderWriterOptions)

Converts the provided BinaryData into a model.

IPersistableModel<ThreatIntelligenceObject>.GetFormatFromOptions(ModelReaderWriterOptions)

Gets the data interchange format (JSON, Xml, etc) that the model uses when communicating with the service.

IPersistableModel<ThreatIntelligenceObject>.Write(ModelReaderWriterOptions)

Writes the model into a BinaryData.

Applies to