OperationalInsightsWorkspaceSecurityInsightsResource.QueryThreatIntelligences Method

Definition

Gets all TI objects for the workspace.

  • Request Path: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/threatIntelligence/{tiType}/query
  • Operation Id: ThreatIntelligence_Query
  • Default Api Version: 2024-01-01-preview
public virtual Azure.Pageable<Azure.ResourceManager.SecurityInsights.Models.ThreatIntelligenceObject> QueryThreatIntelligences (Azure.ResourceManager.SecurityInsights.Models.ThreatIntelligenceType tiType, Azure.ResourceManager.SecurityInsights.Models.ThreatIntelligenceQuery query = default, System.Threading.CancellationToken cancellationToken = default);
abstract member QueryThreatIntelligences : Azure.ResourceManager.SecurityInsights.Models.ThreatIntelligenceType * Azure.ResourceManager.SecurityInsights.Models.ThreatIntelligenceQuery * System.Threading.CancellationToken -> Azure.Pageable<Azure.ResourceManager.SecurityInsights.Models.ThreatIntelligenceObject>
override this.QueryThreatIntelligences : Azure.ResourceManager.SecurityInsights.Models.ThreatIntelligenceType * Azure.ResourceManager.SecurityInsights.Models.ThreatIntelligenceQuery * System.Threading.CancellationToken -> Azure.Pageable<Azure.ResourceManager.SecurityInsights.Models.ThreatIntelligenceObject>
Public Overridable Function QueryThreatIntelligences (tiType As ThreatIntelligenceType, Optional query As ThreatIntelligenceQuery = Nothing, Optional cancellationToken As CancellationToken = Nothing) As Pageable(Of ThreatIntelligenceObject)

Parameters

tiType
ThreatIntelligenceType

TI type.

query
ThreatIntelligenceQuery

The query to run on the TI objects in the workspace.

cancellationToken
CancellationToken

The cancellation token to use.

Returns

A collection of ThreatIntelligenceObject that may take multiple service requests to iterate over.

Applies to