Skip to content

Latest commit

 

History

History
54 lines (40 loc) · 2.53 KB

security-indicator.md

File metadata and controls

54 lines (40 loc) · 2.53 KB
Raw
title description author ms.localizationpriority ms.subservice doc_type
indicator resource type
An abstract type that represents an indicator of compromise or increased risk.
joerattazzi-microsoft
medium
security
resourcePageType

indicator resource type

Namespace: microsoft.graph.security

[!INCLUDE threatintelligence-api-disclaimer]

An abstract type that represents an indicator of compromise or increased risk. Indicators communicate artifacts that indicate that an asset was affected by or related to an attack vector or malicious actor.

This resource isn't directly addressable. You can interact with this resource through one of the following subtypes:

Properties

Property Type Description
id String The system-generated ID for the indicator.
source microsoft.graph.security.indicatorSource The source that provides this indicator. The possible values are: microsoftDefenderThreatIntelligence, openSourceIntelligence, public, unknownFutureValue.

Relationships

Relationship Type Description
artifact microsoft.graph.security.artifact The artifact related to this indicator.

JSON representation

The following JSON representation shows the resource type.

{
  "@odata.type": "#microsoft.graph.security.indicator",
  "id": "String (identifier)",
  "source": "String"
}