artifact resource type

Namespace: microsoft.graph.security

Note

The Microsoft Graph API for Microsoft Defender Threat Intelligence requires an active Defender Threat Intelligence Portal license and API add-on license for the tenant.

Represents an abstract entity found online by Microsoft security services.

Current types of artifacts include:

• host
  • hostname
  • ipAddresss
• hostComponent
• hostCookie
• hostTracker
• passiveDnsRecord
• unclassifiedArtifact

Instances of artifact identified in the following Microsoft Security API groups should handle the possible implementations. Microsoft Security APIs that currently support the artifact type:

• Threat intelligence

Properties

Property	Type	Description
id	String	Unique identifier for the artifact.

Relationships

None.

JSON representation

The following JSON representation shows the resource type.

{
  "@odata.type": "#microsoft.graph.security.artifact",
  "id": "String (identifier)"
}